last executing test programs: 3m16.012104416s ago: executing program 2 (id=120): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x898bc33113a959a3) (async) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x898bc33113a959a3) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x10001, 0x0) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f00000001c0)={'vxcan1\x00'}) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r3, 0xc01864cd, &(0x7f00000002c0)={&(0x7f0000000240), &(0x7f0000000280)=[0x5, 0x4, 0x0, 0x0, 0x3], 0x0, 0x1}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r3, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000400)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, &(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xed, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x1c, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0x4, &(0x7f0000000300)=@raw=[@exit, @map_idx={0x18, 0x2, 0x5, 0x0, 0xe}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f0000000340)='syzkaller\x00', 0x101, 0x19, &(0x7f0000000380)=""/25, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, r3, 0x8, &(0x7f00000003c0)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, r4, r3, 0x0, &(0x7f0000000740)=[r3], 0x0, 0x10, 0xfa60}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0x4, &(0x7f0000000300)=@raw=[@exit, @map_idx={0x18, 0x2, 0x5, 0x0, 0xe}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f0000000340)='syzkaller\x00', 0x101, 0x19, &(0x7f0000000380)=""/25, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, r3, 0x8, &(0x7f00000003c0)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, r4, r3, 0x0, &(0x7f0000000740)=[r3], 0x0, 0x10, 0xfa60}, 0x94) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000840)={0x8, 0x0}) ioctl$DRM_IOCTL_SG_FREE(r3, 0x40106439, &(0x7f0000000880)={0x5, r6}) (async) ioctl$DRM_IOCTL_SG_FREE(r3, 0x40106439, &(0x7f0000000880)={0x5, r6}) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f00000008c0)={0x1000000000000000, 0x10000, 0x7, 0x5, 0x15}) (async) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f00000008c0)={0x1000000000000000, 0x10000, 0x7, 0x5, 0x15}) r7 = getpid() ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000e00)=0x0) r9 = getgid() r10 = getpgrp(0xffffffffffffffff) statx(0xffffffffffffffff, &(0x7f0000000e40)='./file0\x00', 0x2000, 0x800, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000001040)={'\x00', 0x3, 0x8000, 0x5, 0x4, 0x781, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000010c0)={{{@in6=@private1, @in6=@mcast1}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f00000011c0)=0xe8) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000010c0)={{{@in6=@private1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f00000011c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000001200)='./file0\x00', &(0x7f0000001240), 0x400) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000001200)='./file0\x00', &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000012c0)={r0}) r17 = openat(r3, &(0x7f0000001300)='./file0\x00', 0x82, 0x0) r18 = syz_clone(0x2008000, &(0x7f0000001340)="c330dc6bc38f70cdff116d736bc7e8c1b80a0fbc", 0x14, &(0x7f0000001380), &(0x7f00000013c0), &(0x7f0000001400)="070e6eb0a8479ff67bee14aa8ff16013ad45c013f12ad0b99e5b24ecb857800d060a74578eb12f6e84cf0d52c9d3b6c17951cdfd636873fb04e9a3dc8ac91d24b2f3a845beab1ae354a0ff549297305fa400552c245a0b166dc6ec04b9003684115c9ba9e2bf9c4831e0ec95d01119e6fadf176028756086c46854de27a55274af7aed64eceafbc9e93a2bf301b807ba5334bf6504e2d24e867ddd1ba42bfa3d685b9d709c0308cf5887e99d2cdae3dc77bb1251f3a82cc2cb48fd2527b80f8a849cd75942a50f61a30ec1f7644b59e24689358df6d2d59b76970ac673967a52720684e19376f1da7a13920fc4381c51") lstat(&(0x7f0000001500)='./file0\x00', &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r3, &(0x7f00000015c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) getpgid(0xffffffffffffffff) (async) r21 = getpgid(0xffffffffffffffff) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000004a40)={0x2, 0x5db, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x6, 0x2}) fstat(r0, &(0x7f0000004a80)) (async) fstat(r0, &(0x7f0000004a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r0, &(0x7f0000004b40)=[{{&(0x7f0000000900)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000980)="8a7dbe35ae14b9", 0x7}, {&(0x7f00000009c0)="5c10d5afa1440e5e3028fb0d5d4291763d3fcbe80aab74c877bfb7a49c562d0200759500a1177b796fbd802e0b4fa0a3abbd50356c3b3c6f78b350de7600a3fe36c5e7892ab5b6f854c25822b7a94dfeb7684d6a175aa5b3fc3ec792ff6fc193ac160ef36e2df03ca966f6a204d22aa90f378c2925ba0818b739d5c22929805285d47d389dcec2c76a42d378d478309c603ef5489a0e80d7c43298c830ac39cd248ee6c3038d864bdb732fba897e5a0020af6a871bdca173ec621a", 0xbb}, {&(0x7f0000000a80)="54cc0b83cb543b80bf1d18abfe0df2ff8cffc0ec0c55cc088970f83d451e6a74034c63e855bd900e6301", 0x2a}, {&(0x7f0000000ac0)="bec3d1274a850e444ec8f025976074cbac02e70003a8a112203dc3f7733885b3f9c57105b2601c5bd1ee924a7b7fae667107368f68862a258e512f8f40fce49f8b49103b75fe4057c97f5895ef7d", 0x4e}, {&(0x7f0000000b40)="b5aa7a83f3c43effd52bb749d7a9c9f1ec445beba8fb15165b5aa17f799e5bfb4bd096e3eea77d73fcb669ad6a0032e020ec5fda75e159b75c7a2409e01129d88ad7a0334895132892647fa490de7011cee539da6e9cc690234ee53aca51dacd6bf659c30014482b51da45ba0116", 0x6e}, {&(0x7f0000000bc0)="4b1659d32d023fe4d579ea84930d2e9a70591f21a196cfb47d69c13dbb7231e6bc06fa2aa6e8b531450eb942ffb0b8e31ddc72e0589a96a6435838c376f66ea5a94fcab3803afdf6c3e4f23dbd4600d53fd3a149c7c7feeb95bcd6e31b563ab43609849191386c2103c3901e7e177bc63c1fbeca6fe5470b8aa31272478cf824c068c16c606f3c862c", 0x89}, {&(0x7f0000000c80)="3afc6ca4df1df1a5865a5c1442882501ac36be24b2651cfcacd2230760a9767f85", 0x21}, {&(0x7f0000000cc0)="ad00b7fb7eabb65a6ab8d2a774acb93ddc47d422b990871e707fe06d21a4cf374dee60500be2fbced7f394c760", 0x2d}, {&(0x7f0000000d00)="2b7b4cf199ca7f64ced3f857e1bce61172e46fa05526f045da4739fd23739177b9f4112c4d7e5f", 0x27}], 0x9, &(0x7f0000003600)=[@cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, r12}}}, @cred={{0x1c, 0x1, 0x2, {r13, r14}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, r15}}}, @rights={{0x14, 0x1, 0x1, [r5]}}, @rights={{0x30, 0x1, 0x1, [r0, r16, r0, r3, r2, r17, r3, r5]}}, @cred={{0x1c, 0x1, 0x2, {r18, r19, r20}}}], 0xe8, 0x44}}, {{&(0x7f0000003700)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000049c0)=[{&(0x7f0000003780)="6dd0b93b581242af81b71df7a16353491e52227cc52496765d58175e537cbae7f33b9fd3368dcab0e39833b68cf8b15bb1b66cd23c3a0e1c380129e077e007e52ae88e9d12961ec5d4da52da4c", 0x4d}, {&(0x7f0000003800)="e718cd1b4e159922698f1b9cd2fd1a95689456449fa2d9d9637fa11df26f983ed0d16336dc7c8419fccb69395354adc94b6e778e95", 0x35}, {&(0x7f0000003840)="a5e88237a69771c63eb6dbdc175b33624c6d3dd0bc410fe5bec417221d63b77d2fc81e770a1f680d9e4a01389d3d6d5e36ee915b9be46ff3cd8afe742bf8297019e0722362d3a536b8384ff96644b5754fa0c94ca19da6acbe0c089e0918f2e9bb2fd71c9f81a1b69d2362699961b9e25d457f5e172ce16e006195bddf9a4d36f1a5322443701d3362310096", 0x8c}, {&(0x7f0000003900)="b37d80c98a6b0c2b3b0ad75c3138ca149e85cc09c0a5f27236d507e52fc596a078f6a3ac25e05cb24fb6d5a2242abc471527ad59b892a64e8bb4383a5870c9589717a1d8b643c0c4211e8af458e56c3a4b1511d5da47ede06e3568e9e8dccf027ddab9abc577fd860505bdd61d371201967598744bf9f09ddea93704479fae55006cbc48abad061d362f939402826acfe3dd39d12abbb70af820eab718db251e0bb2", 0xa2}, {&(0x7f00000039c0)="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", 0x1000}], 0x5, &(0x7f0000004b00)=[@cred={{0x1c, 0x1, 0x2, {r21, r22, r23}}}, @rights={{0x18, 0x1, 0x1, [r5, r3]}}], 0x38, 0x24000000}}], 0x2, 0x20000080) 3m15.77804979s ago: executing program 2 (id=123): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x5, &(0x7f0000000040)={0x0, 0x9ab, 0xc000, 0x3, 0x39}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0x99, 0x0, 0x0, 0x10000, 0x2, '\x00', 0xc94}) ioctl$KVM_RUN(r3, 0xae80, 0x40000000) 3m15.452893276s ago: executing program 2 (id=124): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nombcache}, {@noload}, {@commit={'commit', 0x3d, 0x6}}]}, 0x3, 0x440, &(0x7f0000000280)="$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") (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) r0 = open$dir(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000180)=@v2={0x2, @aes128, 0x8, '\x00', @a}) 3m15.24001913s ago: executing program 2 (id=125): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800, &(0x7f0000000280)={[{@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@discard}, {@errors_remount}, {@dmask={'dmask', 0x3d, 0x3}}, {@fmask={'fmask', 0x3d, 0x5}}, {@allow_utime={'allow_utime', 0x3d, 0x5}}, {@gid}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@gid}, {@utf8}]}, 0x1, 0x1527, &(0x7f0000000380)="$eJzs3AuYjtXaOPD7Xms9Y0zS2ySHYa11P7zJYZkkySFJDkmSJElOCUmTbElIDDklDUlIDkNyGEJymJg0zufzISFJmiQJySlZ/0v42+3a3977a3/bd31z/67ruax71rPWcz/v/bzvu54H813nITUa1azagIjgT8GLfyQDQCwADACA6wAgAICy8WXjL/TnlJj85w7C/r0eSbvaGbCrieufvXH9szeuf/bG9c/euP7ZG9c/e+P6Z29cf8ays03TClzPW/bd+Pl/dsbf//+HZJUa89WaUjd2AYj5Z4dw/bM3rv//WcE/sxPXP3vj+mdXsVc7Afa/AL//s4Mcf7eH65+9cf0Zy86u9vPnq71BJHu/Blf7+mOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxlj2c9lcoALjcvtp5McYYY4wxxhhj7N/H57jaGTDGGGOMMcYYY+x/HoIACQoCiIEcEAs5IQ4EAFwLueE6iMD1EA83QB64EfJCPsgPBSABCkIh0GDAAkEIhaEIROEmKAo3QzEoDiWgJDgoBYlwC5SGW6EM3AZl4XYoB3dAeagAFaES3AmV4S6oAndDVbgHqkF1qAE14V6oBfdBbbgf6sADUBcehHrwENSHh6EBPAIN4VFoBI9BY3gcmkBTaAbNocV/a/xL0B1ehh7QE5KhF/SGV6AP9IV+0B8GwKswEF6DQfA6pMBgGAJvwFB4E4bBWzAcRsBIeBtGwTswGsbAWBgHqTAeJsC7MBHeg0kwGabAVEiDaTAd3ocZMBNmwQcwGz6EOTAX5sF8SIePYAEshAz4GBbBJ5AJi2EJLIVlsBxWwEpYBathDayFdbAeNsBG2ASbYQtshW2wHXbAp7ATPoNdsBv2wOewF774F8ef+pvxXRAQUKBAhQpjMAZjMRbjMA5zYS7MjbkxghGMx3jMg3kwL+bF/JgfEzABC2EhNGiQkLAwFsYoRrEoFsViWAxLYAl06DARE7E03oplsAyWxbJYDstheayAFbASVsLKWBmrYBWsilWxGlbDGlgD78V7sRfWxtpYB+tgXax7+fEUNsAG2BAbYiNshI2xMTbBJtgMm2ELbIEtsSW2wlbYBttgW2yL7bAdJmEStsf22AE7YEfsiJ2wE3bGztgFu2LXrJdyAL6ML2NPrCZ6YW/sjX0wJUc/7I/98VUciK/ha/g6puBgHIJv4Bv4Jg7DkzgcR+BIHImVxTs4GscgiXGYiqk4ASfgRJyIk3AyTsapmIbTcDpOxxk4E2fiBzgbP8QPcS7OxfmYjum4ABdiBmbgIjyFmbgYl+BSXIbLcRmuxFW4EtfgWlyD63E9bsSNuBk341bcittxO36KCgA/w924G1NwL+7FfbgP9+N+PIAHMAuz8CAexEN4CA/jYTyCR/AoHsPjeAxP4Ak8iafwNJ7Gs3gWz+ELCd80/LT46hQQFyihRIyIEbEiVsSJOJFL5BK5RW4RERERL+JFHpFH5BV5RX6RXySIBFFIFBJGGEEijAEAERVRUVQUFcVEMVFClBBOOJEoEkVpUVqUEWVEWXG7KCfuEOVFBdHaVRKVRGXRxlURd4uqoqqoJqqLGqKmqClqiVqitqgt6og6oq6oK+qJh0R90Qv74SPiQmUaicHYWAzBJqKpkJc+wVqKYdhKtBZtxFNiBA7HdqKlSxLPivZiNHYQfxFj8HnRSYzDzuJF0UV0Fd3ES6K7aOV6iJ5iEvYSvcVU7CP6in6iv5iB1cUHODtnDfG6SBGDxRDxhpiPb4ph4i0xXIwQI8XbYpR4R4wWY8RYMU6kivFignhXTBTviUlispgipoo0MU1MF++LGWKmmCU+ELPFh2KOmCvmifkiXXwkFoiFIkN8LBaJT0SmWCyWiKVimVguVoiVYpVYLdaItWKdWC82iI1ik9gstoitYpvYLnaIT8VO8ZnYJXaLPeJzsVd8IfaJL8V+8ZU4IL4WWeIbcVB8Kw6J78Rh8b04In4QR8UxcVz8KE6In8RJcUqcFmfEWfGzOCd+EeeFFyBRCimlkoGMkTlkrMwp4+Q1MpcMLr2618t4eYPMI2+UeWU+mV8WkAmyoCwktTTSSpKhLCyLyKi8SRaVN8tisrgsIUtKJ0vJRHmLLC1vlWXkbbKsvF2Wk3fI8rKCrCgryTtlZXmXhMjFY1ST1WUNWVPeK5PhPllb3i/ryAdkXfmgrCcfkvXlw7KBfEQ2lI/KRvIx2Vg+LpvIprKZbC5byCdkS/mkbCVbyzbyKdlWPi3byWdkknxWtpf+0iXyvOwkX5Cd5Yuyi+wqu8lf5HnpZQ/ZU0IvkL3lK7KP7Cv7yf5ygHxVDpSvyUHydZkiB8sh8g05VL4ph8m35HA5Qo6Ub8tR8h05Wo6RY+U4mSrHywnyXTlRvicnyclyipwq0+Q02e/STLOk/Ifj3/2D8YN+PfpGuUlullvkVrlNbpc75Kdyp9wpd8ldco/cI/fKvXKf3Cf3y/3ygDwgs2SWPCgPykPykDwsD8sj8og8Ko/JM/JHeUL+JE/KU/KUPCPPyrPy3KXXABQqoaRSKlAxKoeKVTlVnLpG5VLXqtzqOhVR16t4dYPKo25UeVU+lV8VUAmqoCqktDLKKlKhKqyKqKi6CS9dMKqEKqmcKqUS1S3/ynhVVN2siqnivxl/Ob/kv5NfC9VCtVQtVSvVSrVRbVRb1Va1U+1UkkpS7VV71UF1UB1VR9VJdVKdVWfVRXVR3VQ31V11Vz1UD5WsklVv9Yrqo/qqfqq/GqBeVQPVQDVIDVIpKkUNUUPUUDVUDVPD1HA1XI1UI9UoNUqNVqPVWDVWpapUNUFNUBPVRDVJTVJT1BSVptLUdDVdzVAz1Cw1S81Ws9UcNUfNU/NUukpXC9QClaEy1CK1SGWqxWqxWqqWquVquVqpVqrVarVaq9aq9Wq9ylSb1Ca1RW1R2xTCDrVD7VQ71S61S+1Re9RetVftU/vUfrVfHVAHVJbKUgfVQXVIHVKH1WF1RB1RR9VRdVwdVyfUCXVSnVSn1Wl1Vp1V59Q5dV6dv7DsC0QgAhWoICaICWKD2CAuiAtyBbmC3EHuIBJEgvggPsgT3BjkDfIF+YMCQUJQMCgU6MAENhCXih4NbgqKBjcHxYLiQYmgZOCCUkFicEtQOrg1KBPcFpQNbg/KBXcE5YMKQcWgUnBnUDm4K6gS3B1UDe4JqgXVgxpBzeDeoFZwX1A7uD+oEzwQ1A0eDOoFDwX1g4eDBsEjQcPg0aBR8FjQOHg8aBI0DZoFzYMW/9b5vT+Z70nXQ/fUybqX7q1f0X10X91P99cD9Kt6oH5ND9Kv6xQ9WA/Rb+ih+k09TL+lh+sReqR+W4/S7+jReoweq8fpVD1eT9Dv6on6PT1JT9ZT9FSdpqfp6fp9PUPP1LP0B3q2/lDP0XP1PD1fp+uP9AK9UGfoj/Ui/YnO1Iv1Er1UL9PL9Qq9Uq/Sq/UavVav0+v1Br1Rb9Kb9Ra9VW/T2/UO/aneqT/Tu/RuvUd/rvfqL/Q+/aXer7/SB/TXOkt/ow/qb/Uh/Z0+rL/XR/QP+qg+po/rH/UJ/ZM+qU/p0/qMPqt/1uf0L/q89hcW9xe+3o0yysSYGBNrYk2ciTO5TC6T2+Q2ERMx8Sbe5DF5TF6T1+Q3+U2CSTCFTCFzARkyhU1hEzVRU9QUNcVMMVPClDDOOJNoEk1pU9qUMWVMWVPWlDPlTHlT3lQ0Fc2d5k5zl7nL3G3uNveYe0x1U93UNDVNLVPL1Da1TR1Tx9Q1dU09U8/UN/VNA9PANDQNTSPTyDQ2jU0T08Q0M81MC9PCtDQtTSvTyrQxbUxb09a0M+1Mkkky7U1708F0MB1NR9PJdDKdTWfTxXQx3Uw30910Nz1MD5Nskk1v09v0MX1MP9PPDDADzEAz0Awyg0yKSTFDzBAz1Aw1w8wwM9yMMCMvLFTNO2a0GWPGmnEm1aSaCWaCmWgmmklmkplippg0k2amm+lmhplhZplZZraZbeaYOWaemWfSTbpZYBaYDJNhFplFJtNkmiVmiVlmlpkVZoVZZVaZNWaNWQfrzAazwWwym8wWs8VsM9vMDrPD7DQ7zS6zy+wxe8xes9fsM/vMfrPfHDAHTJbJMgfNQXPIHDKHzWFzxBwxR81Rc9wcNyfMCXPSnDSnzWlz1uS79H3pTazNaePsNTaXvdbmttfZv43z2wI2wRa0hay2eW2+38TGWlvMFrclbEnrbCmbaG/5XVzeVrAVbSV7p61s77JVfhfXsvfZ2vZ+W8c+YGvae38T17UP2nr2MVsfEcA2tQ1tc9vIPmYb28dtE9vUNrPNbVv7tG1nn7FJ9lnb3j73u3iBXWhX2dV2jV1rd9nd9rQ9Yw/Z7+xZ+7PtYXvaAfZVO9C+ZgfZ122KHfy7eKR9246y79jRdowda8f9Lp5ip9o0O81Ot+/bGXbm7+J0+5GdbTPsHDvXzrPzf40v5JRhP7aL7Cc20wawxC61y+xyu8Ku/P+5LrXr7Qa70e60n9ktdqvdZrfbHZcXwna33WM/t3vtF/ag/dbut1/ZA/awzbLf/BpfOL/D9nt7xP5gj9pj9rj90Z6wP6nLoy+c+4/2F3veeguEBCRJUUAxlINiKSfF0TWUi66l3HQdReh6iqcbKA/dSHkpH+WnApRABakQaTJkiSikwlSEonQTXU6vBJUkR6UokW6h0nQrlaHbqCzdTuXoDipPFagiVaI7qTLdRVXobqpK91A1qk41qCbdS7XoPqpN91MdeoDq0oNUjx6i+vQwNaBHqCE9So3oMWpMj1MTakrNqDm1oCeoJT1Jrag1taGnqC09Te3oGUqiZ6k9PUcd6C/UkZ6nTvQCdaYXqQt1pW70EnWnl6kH9aRk6kW96RXqQ32pH/WnAfQqDaTXaBC9Tik0mIbQGzSU3qRh9BYNpxE0kt6mUfQOjaYxNJbGUSqNpwn0Lk2k92gSTaYpNJXSaBpNp/dpBs2kWfQBzaYPaQ7NpXk0n9LpI1pACymDPqZF9All0mJaQktpGS2nFbSSVtFqWkNraR2tpw20kTbRZtpCW2kbbacd9CntpM9oF+2mPfQ57aUvaB99SfvpKzpAX1MWfUMH6Vs6RN/RYfre96Qf6Cgdo+P0I52gn+gknaLTdIbO0s90jn6h8+QJQgxFKEMVBmFMmCOMDXOGceE1Ya7w2jB3eF0YCa8P48MbwjzhjWHeMF+YPywQJoQFw0KhDk1oQwrDsHBYJIyGN4VFw5vDYmHxsERYMnRhqTAxvCUsHd4alglvC8uGt4flwjvC8mGF8LEHKoV3hpXDu8Iq4d1h1fCesFpYPawR1gzvDWuF94W1w/vDOuEDYZnwwbBe+FBYP3w4bBA+EjYMHw0bhY+FjcPHwyZh07BZ2DxsET4RtgyfDFuFrcM24VNh2/DpsF34TJgUPhu2D5/7tf/BhX+/PznsFfYOXwlfCb2/X86Lzo+mRz+KLogujGZEP44uin4SzYwuji6JLo0uiy6ProiujK6Kro6uia6Nrouuj26Ibox6XzMHOHTCSadc4GJcDhfrcro4d43L5a51ud11LuKud/HuBpfH3ejyunwuvyvgElxBV8hpZ5x15EJX2BVxUXeTK+pudsVccVfClXTOlXKJrrlr4Vq4lu5J18q1dm3cU+4p97R72j3jnnHPuvbuOdfB/cV1dM+7Tu4F94J70XVxXV0395Lr7sbnvvieTHa9XW/Xx/Vx/Vw/N8ANcAPdQDfIDXIpLsUNcUPcUDfUDXPD3HA33I10I90oN8qNdqPdWDfWpbpUN8FNcBPdRDfJTXJT3BSX5tLcdDfdzXAzXOWZF48yx81x89w8l+7S3QJ3Yc2Y4Ra5RS7TZbolbolb5pa5FW6FW+VWuTVujVvn1rkNboPb5Da5LW6L2+a2uR1uh9vpdrpd/rqLk7q9bp/b5/a7/e6A+9pluW/cQfetO+S+c4fd9+6I+8EddcfccfejO+F+cifdKXfanXFn3c/unPvFnXfepUbGRyZE3o1MjLwXmRSZHJkSmRpJi0yLTI+8H5kRmRmZFfkgMjvyYWROZG5kXmR+JD3yUWRBZGEkI/JxZFHkk0hmZHFkSWRpZFlkecT7gltCX9gX8VF/ky/qb/bFfHFfwpf0zpfyif4WX9rf6sv423xZf7sv5+/w5X0FX9E/7pv4pr6Zb+5b+Cd8S/+kb+Vb+zb+Kd/WP+3b+Wd8kn/Wt/fP+Q7+L76jf9538i/4zv5F38V39d38S767f9n38D19su/le/tXfB/f1/fz/f0A/6of6F/zg/zrPsUP9kP8G36of9MP82/54X6EHxnzth91+RYZxvlUP95P8O/6if49P8lP9lP8VJ/mp/26xww/08/yH/jZ/kM/x8/18/x8n+4/8gv8Qp/hP/aL/Cc+0y++/FDZr/Ar/Sq/2q/xa/06v95v8Bv9Jr/Zb/Fb/Ta/3e/wn/qd/jO/y+/2e/znfq//wu/zX/r9/it/wH/ts/w3/qD/1h/y3/nD/nt/xP/gj/pj/rj/0Z/wP/mT/pQ/7c/4s/5nf87/4s/z/1ljjDHGGPunjL/SFL/tufg4v9cfjBF/tXNvALh2a4Gsv+6/sF5cl/diu69IaBsBgGd7dn7k8latWnJy8qV9MyUEReYCXP6boAti4Eq8GNrA05AEraH0H+bfV3Q9S/9g/ujtAHF/NSYWrsRX5v8SAJP/YP4nnhq5oFx4Ov6/mH8uQLEicHkhDTnh1/jy/L8+X2kNZf5O/vla/oP8c36VCtDqr8bkgivxlfwT4Ul4DpJ+sydjjDHGGGOMMXZRX1Gx4+X7z8v/4vOP7s8T1JUxOeBK/I/uzxljjDHGGGOMMXb1Pd+12zNPJCW17vivN6r81/vcAP/tmX9tNIY/NZwb/2rDe4DLP1EA8CcnBLjQkP/Js9j8HzlWyqW3zt92LTvjgz95zf9valzlDybGGGOMMcbYv92VRf9vf66uVkKMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxlg29J/4dWJX+xwZY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yxq+3/BQAA//8qcP4p") mkdir(&(0x7f0000000600)='./file0\x00', 0x82) mount$9p_virtio(0x0, &(0x7f0000000d80)='./file0\x00', 0x0, 0x1800402, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c00a0f2ba98930bf426fbd7e6d582ffb63b1adef2ec99f3d84a9c84e6acb152ccdd5b2dfcbbf00611f9236654d8bedcd0e0f5a1367042789e4b13368124efecbf6c3e544f68037f21cc912ce459d6bc922236c7329af4c039698c7e0c5830addf594884d4c6f2dd66ae33ef9262a720d81b84e7b95e42badcf5666ee6ba4265e0201682d4fd55cdd334cff7b458b234117167e17b6f1eb412e394fdaf7133157bf1f06e99082f1eb3a2526c3b61982eea1422294661f8c32fc80a66b84a8f84d32b3355b86e6dc12b7302895f032cbf1027211acf6a7cb802c860a0"]) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file1\x00', 0x80000, 0x117) llistxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 3m14.767508849s ago: executing program 2 (id=128): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_usb_connect(0x0, 0x2d4, &(0x7f0000000500)=ANY=[@ANYBLOB="120100002ad90d40790927024d6d000000010902c20201000010000904"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r2}, 0x10) write$sysctl(r1, &(0x7f0000000580)='1\x00', 0x2) write$sysctl(r1, &(0x7f0000000000)='2\x00', 0x2) 3m14.261002299s ago: executing program 2 (id=130): syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) (async) r1 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x203, 0x4, 0xffffffffffffffff, 0x200000000000008, 0x8, 0x200, 0x7, 0x2c, 0x80000006, 0x1}) ioctl$SNDRV_PCM_IOCTL_RESET(r1, 0x4141, 0x0) 3m13.538063962s ago: executing program 32 (id=130): syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) (async) r1 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x203, 0x4, 0xffffffffffffffff, 0x200000000000008, 0x8, 0x200, 0x7, 0x2c, 0x80000006, 0x1}) ioctl$SNDRV_PCM_IOCTL_RESET(r1, 0x4141, 0x0) 11.156755998s ago: executing program 4 (id=624): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20080014) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224"], 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) socket$inet6_udplite(0xa, 0x2, 0x88) socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0xfff2}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 7.654529734s ago: executing program 1 (id=633): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000200)=ANY=[]) 7.011899997s ago: executing program 4 (id=635): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000b1c0)="02cbda572ec32cf73bdbc52bfa4e157261eb6cbd0d1d50c9d937a19739fcb9f8697bf69c0e2e526012185f1b86989056f9c2d38906e8a47b9b5fde55a777a6357ac40c211de6325f496fd86dac09bb38b62b37d715d06e3c61b172aa4a662cefc7810ba37161c637a9b56a7c7b022426826076f1d2bf3c3b6f92ab9c27d691385c3efc354f1423d01d6a49d534fca3f2bf518cd645cf18b4ac2d2ac4c5c29ba487c9d27bb488a73146d5b9e21427af37dee4a276646eb2519e4f6c76cce2f7bf7e708d5180959f71d3797220101849c5144ef8338a5a2079ecce466000cf290d4df42e82865512fb5fb01fb655613cf1c469682edd86a4bef86aa23240ca6a2ff38b59339f7530e8a8027aee0628e0f81b2f5c661b149d780f20ec54c8d3d42c0c49f83b1c0d4bec94bc9221e6fc7c75ebd3b68081df207721584055baeaf6429616d57cb35d2977d45971d209e4c45dfe3c5c105e0e2b49fc8685b4945f31c9468f3c950fcf70a8f45e5a3be62f73c228a6a34a99b6f584b42c50506a6c14187f44887270011cc98d7e5e258df533411c8d39bfa9e27014912ed9e9696fd4074fbefcd4817a344be5ea348f4a7a34733a5bc5674b1bcd39404d5a458d1e19b6d4bdb4e23403154249b5798dea7b60bbf0c09c25027a4efd49d36cbe65b7450c0bde580d356ad4e3cc7a9a57e6ac0b542592617869e57d9bed28f0590241bdeb51fa775aa8806a55df2c795a61146bdbe38eb7a716180bb9b728696bb0e78ff11f89b17c7e7fe9b14ea976ccd9991f01f5d0c4620053d0b5ce42af76591fd0706494b91a6dfc43560f9a9538ada19825ffe3a7cc7a56b755d46ae1189b1f1ac729d9938ad48a066624c1b28003a9d193b4b34c4ab2609949df96f693389f27dd3e1f42b178eb17079c1448d7e9fac30ddb53ce8e5a157db8296cd3069d332bad0528ae56a6db41ba84699b85f225a78a33879512a5f0b795fc58957ef6766afcf546fe36c8125276eeaac9d647b2459c164aae86a2703e85d4f552a0647cb4bdfaecf6ec3a264a6b6892a9a1ba08a9055e98b49edc4e1f8010f63f601a8251921df70e15011116c471a70a0580b1789bcff471dcc95ad209a44ca2453d58d3ea4c71e0383db68adf332a497a84faada33f18bd3cd79ff9d6809409769b02a66cf524534ab7134e3066eef904d8961195d9cdc396a012bb3bc1b1ccd60317d08cb059174642aa3f60584e58e7417c1736f6863fae9e7103158711167a53d7d5deddacee6958fd4c2e0672b8dd90b41512b1f59fc49099633860dd6902c1df3d5924b1cf81ec848d51129b3eddea619129e961390d65d2243d400a1e30e524eeee1a701da5e21598acf457947bad693892a2989097ecbe9607a33ffb33425ccac5e19ebd1f88bf3acc03331adf9697bed04b33ac9fceaa3bdc9a417b12108e10f9c45b6d36181099056a448689da4ef68beee35f5930ce4a5712cbed98239a674c5883d6a5e0df9c1cbe1eda8dc19d14c4abe896e3b28bb3d4b2a0e9ae31ca07b9819825f3a6ab82c5501becf023a656cbff569dbc3035ae3c585747fb459581629051286b170b679b683a0b2eea6ef3b41a68012e5f4d64f689c2b909cfd06d37c0a802be2d882351bffeddef1373d8cbafa10fefbc28b31a70b6e912fc61257aa76a0f0dc1d3ef72d2f61517a359053c3dcb7d49d8a4da61bcf3b3dafc0528bb037cec0d986b3949fff38a21dab6b8a3a167bacf067c5f7842ebebcc1bd54776b2e54a098303c6331beb16e42d0669a518af2d173405786439d739b813c145c4f9f98a537b1065bf4636c76e38b71943815a6d1227d0a6965dffc37c00444aebd2ec19286b83443902dba1354a69377e97070a79151e64711111bf3e0a755b0fb1a1d5d009fdf61b665b41a3b7dbd0655236360141c52b93bc907b0672743973c30d6c9ece47fa1fe3625cc8acbe305156012ef1c5ea140be70b804887be593f25faa13ee4ea2d9821d23c3e047d74ad4f7de4d95d275ea3e6c87479f1badfcef002ebc7020b581a096abac1a80ef6ff476a01b01f7c0fb1239fcc182f74e5b5965412c0f4170432af15daf457143b1f41422b8a7f9b81c15a156ddef9af95955090d013cd52aa66ebfbc87c8030e7f86b52aadaa2e63c261185eed7c46b5f8d56e8301a9cc1578aff77b42419a5eb2e263207ef259f4da6ca6466ac9326a633b39e005028c07c9aedf17a70e638d7ed84638406e6028be879fd0fe491152e181d5527933950eb67a52cf155d5c845a6425e41a47b44d9905de26e5132c8d594c1bf6d4f12dbcb96d7431a56546800275623679d6c189e0cebd1fb8063140b89d42da60ed06206d329c29841e69c820428bcde53c998bee0380a816d080b36f64574718b84e0ecafbfd2b9981f4886df258dbf1cfdb148b171516500572a7086516fd519bc861878ec2fceb6872229ff1e9782720e590d8ef4691fa9c4c54bfcc843015913a2ed40bf37048151d17b44365f7f8d3b816d1b1cd40dc5dda6ab8f637b5f6bae92580f1c269c9231c9a79d58d43208be7622147db352b1294260eeab12409f5b5ee94d99548640634bc9479a6e6e06cc8838bf85d9bd95452eaf8ad3cf6c070aac36a7d38fe23cebfaba46c74a6c5c98b1b5243edfe405161b8c3ea0cdb1bcb4e1041fc62451a6094b0c56ee2ed29520b87228959bc01a9a9f54d214704bd321b152a0e88d0646e99a92a390dfa6bc2c34d418e5e900a3b641ab34a5fd8de751bfb3253b7aae3948d871892d7b76b351b073a93f3ad82b0c59bc49ed922c8d63f8d12c14ce1912bf877bc7877f619b03d09200836c775675e0614efabfd5665c3bf12e6131a7232639729b79ac1c5e807246d30934b0f63b31a06c4722278299949c7785d796b6d3d4a5f2fa652b7fe8be447cafe93fcb07167f3ef16b94261fc3a9d22a57a7aac56562a231d79dbf3bdc1f436206337ff0f8e019d76b823c5976ee23ba4e553ec62d261bdc7da90fee46d3472cc267a7a74b88112ef765091df03bb59cf303feaa0149b371a7bdd75c0187ce842dd1e4cdaf7fc0f5ef7ffb559c535f19100ba653728cd936987731d5ac99cb9ef772975b17b2aff8b872df0d189c7944d63ed66cfce8ee92e7a1082c2a501007aacbe0011e6c32489bcb888e1c464bec59902d940d81136c543098a60104bcfd0f4e7c27cb114ff42e8d31fe09a4bcc21cae5ef2f8e4890bd8139fff1b1b2a39e29eaf2e5d2fb810ea37a13e6d2105a6c2ccd03fc110c6f9063e2433e1450dc8ebd8ede0445af662cf7ee705003630ab7d9fc6ed30169ed674dda2802d519e3b49016c6f11612ae53230b062281ddf7a678784516c3d177857f8bdbec7910af8c81333e471bd8a973ce858a14756ef6ec85498714fe8e1e6600023804004b968eea42c410bf0f5c5b2471835454f20230a6d342f96f71a2e64f54b838e5cd939d7a651d402fd60a8a2a081de0c536d5b81345d92165e79fa65140b91c23cdb5829db55f1f93b88bb43a355e9304a17355851d52c0d745b611a30eb400044dce6ac742bcce9df9583b827514af8a2ed4a04553817ba6ea22e9beaba65d32189a5c2bf65a09d2c8a8798c0645fb24157a4e71be7889fe65c34869d8852b21661407feed92afb0bfe582693a21c050e5adce1fe97755b0be276c36b81b89700b99d23d315a64f7e115eacdb3ade725cb3cfe36c27a5e2addad60290b022a9fc26132b5ec3b5f1d884399fd992525a3e17e18e7ee6078a64b7efc3bbd116e5c305d8ad935baff18ed94c7a8720e729132e110f986991a3ad21cc637282f55588b12756895e2d10afce85b1a04fc271b217278f156c7ffb1ed9dd52b18fc8b153802fc329dca81b278d715f6e31fbcc77d8ce5c2786573bacac30791aff5771fece44063d1e84abcd6a4ae016858893605eecf253c79e59c2152efbe9fdfee3c441e4bc9cb14fc96a675aa17bf7d2024d665fe3982b61888bbe7129a1ec8fafc3480170c71d05f5d22ef7ff0e2ca598fd02bbd0ad82e6ab0e775388bf3aa421c20b6a2a5e256386abff1103f46a8b5c54c2d54b81c50d8bd98aea724bda55f99d95956e939b85d59abdc50ea4cf1d44afa3e8dffc9d84c6b7d28b78c40d7498670602b97c5e2a6281c7876dabc1d14d156e827873818bc590644d2a1d084d39c84e78127b087bf2cd9353fd13d4ab12350318aedadaca6a2728267e6f5f16547caadf3ac2fade3c86b516c6ab53d61ea1c148835b9a2c91fd0ded7283ef720086dfc7728968924731715f78915045a69122d8b23a6db47cc6fccf402b9913e46c9a36924327ca9bba6bb8cf7cc80952501fc2181a2ec7ae4364cc6eac0cba0edda68f3b398a249d114702147f8b1cd9c7f8a15345f42a7a50334928eb4e2de974e4ae2ffb796bc640922f7ada0933460e0c0fc06276dfd228da9bfbbe5a3eade6f98594b0226339156022aad7aa8c9650417cb1551b3b6b31ce436396f68134a6ef23d6b926988fc410f81e1ae01282f244e70051f1b93644f78af3ef6359d106b291568e1ad00ad6ee102964fb7aaaec9732e43a21ea28cda496e4ae367ea738482e777290cca2ef61c8ff10c1b9546b5d395d21c98542f37578d297c13899247a6fdcdf0b8cba6b498875926a19852f97ef60dc1a0c4069fdd4d1fb87a6cd58b8786210687d644a4bad6f8fee0bc5fb94294cffc323e97597be6a5e457a5dd27fe2ebf5c34aef3bb5c43ba0a7d931e7ab02b7c290c5d04a41c01d14d6fc1ba80bfedf71caa0f7e59b135fad73e28d4861d601f79ad32edc6f8d1978d8ecf787f3c9ac71b2404939827b16f3915c8b1445dd1ec012aaeff88789c396665a50df52b244ce5b100d9a29ce52903b8f7f3662c0d0599fd1a7071798b759be02d58e5c6e4626b477653655fb7f5d7bc0ad94dbfe131c9ba5a994c1605c03b9f5173f8205c580bff685e693b23ab4cc7b2e4b21282b14f65684747ad98c0d855a205a6e17b5bb4c2b07097ae32393690e4e07a7f3e25d6bd01c1fb973a67edfa4e1d4a7a96b68570dd9d3bdfbe8a5a69adbd17167533ddbd2a58d70ca1ccea6428770dbcfeb47ddffa99e8b5e69bd34641c1f1a033e86215447fd2927482b12a85f11ae1d8b2054d7f642a9ba526e5a7d8e3d81bd394c264666f4b4dc3ff9c1584f277ff31a29c1358d9a953e0ae2822a3d174a0ce3da386083ae06f02723aea03931a38116a8e4afbc36fb9c094eb340214881a6f838f8d66141e451b9a1bd250363e591bc4ac566123a379272c08c0511e29e1dd1bc06869f3fd151bada9b28a6a71970ae3580d5bb0ab76b38068f504659bc335be1bb2a285329f749303600211d6ef7e151ad861b946d99f36d20074d65426f68a6758270ff946dd387ed3b150199fd81fd2e76a70a2fe2d7a2f8899079068ce48c5380db7e69a1a91f244ed32400e8d9e3097ec2065570dbde88faaee4a938f0b4cc20f31f175df62bf6cd88968ef7e24912dbbf91869eb9b34498d7f6000ef9a62c9441f4177ab5da1428d647b6e3cea1ca8a91b1a1246c2e048654e350cbf3dd4daaaa2558ff9c505ce0fcbcf93601a725289c38724290cffddf87e5345b43a66eb5f9fef718b0df4bcfe82c466017c3d8f0bbfd5544ff2d834a6e653ae789561df44281c8510b4bad838d04ab4a8e84fc4fc022bbe8454b36273cec843731c1df6fce42947a029f61e030990c0002b6f2c9c552227c8785c0b53683de3e518123548e332d25f2b270f595aad389951d1edbb9c6fb14cb4e479acff1ffac191da3d80a696b8be5919710c9137ecc0ca383d8666e30a356759a5299f44c2bfcd03a8df33de0e27d6038a9551cfc5ff43de0d42a6d033bf15f3a44d52f8a71554d1a2efb78042c1c9957256d7ea06b7751b40668feefff205c74f0f947ae0920aa746f17027bbef312708bf72fb23c12d0dcf6493584c1bdd0b5780017c038bc23fb6c25c560bb6da3775cf03502c07b987e64f8a2b84a870b5dd90c6aea7fad3d0a3ee46fda953dc085d272ee5855104b8bab8ed8bfd3338e75eb9ad8118f25c7e580fec613e30cf3eb7059e06d9be015709ba6c9de9dc9b6df8228b13f0439fa8d530aa9a4dc1d44abc3191c159a8816e7368fc5c6a0e57eb881d734c7a5459ba3be1b8a17b5ee6777ee42e962aee199f35ee2c2d4a39275e1dd6a8546daadc7ceab2c90667ad48c75bc7008ec2d7daa57562260d6d4509e67850e988b640569c050d3bedbd6c2de9b4f466e2d0c6f83c3c2392a5adcce1523e89f730a84f8cad28f84d1a0991f44aa4714f93088ec2a2836766d73569c7b0c1f70a067a3f0dff1d01661937aecb39e3d0f8e0ea282cffebbfdac63196eb13c4e53f144fc66a82cc0590f1d6d249c333420c24db92177c89cf0869346c34147dab6c3b94c325ef635d0e6d75c23906e71a7940e13364aef81b97108a4b209d372558d3bb0424ecb6a9a9ee28f7d1585c8af6f1256c812eb48515feda309a08f1a2954039ff0a60a2ab75717d2eb93024586837e552942eb63e0d6735d01258eb4dac6209370c109c1a1763dd742f3551276768648919f9093fd4e0cedff9442ac404e463eaea0ffe58a5085c987c093fd30e121218123457916ced3a7250a796a40451a4729125bce2ba5b6406e6626ecfb1d3f16287ba238feb575f60eba96443c60252d5927b81b73574ff1b7d424623b6cff5ce0d1b31b3d199c85da27f8736d990063f09dfef93402d880b2c5d7a9cdf45cbb4d1baf95be490f3dc9998c2c7ccfcc6e6395e7e09e6c44865834cd3e0968ffcc1d0f54406b55a8952cd8096e8968cdca3632b71546192c76472a66c4a8584eb748c1b3c30d52e8699adbef91329aefbf94d251d0b82bf42a648f73020881a914ea7c529802772b4b60617e9c1d9712a31d0ec3e92af4b97f50ec96e794486101a9e15daf8b7f13078d22767dc3b57bc0431ef39b3ca12b2932aa585bc856e8cf5496d78eaa50f06b483f416b31f78767bd25e260042e84c10e9cf9bb53a3f4fce11d703e90004949b55044907242f8eddef627cfc9642f4a828476074c298ea2d7b07ddb7b4a2b9f8f1e5a32fac7d105c5a12186da19ef5f6475763ee19aa670e7b45f37248fdfa796d6ae761dd77955851faa33675ee22e8174e0a126ac58b9998ccb5e4d12c3e00165533ddf710bf0ab0edf6ba1fecf9548ca1618fd980a4f9a35eeb5c1aa329a288378b9b5ed54b56075810cd22abf0c06ce0f1054805410375d6e41564b71b86cab6929c5c1cedb72e0b1237fdad44edbcfd326312caa49ed0c8f7c5a33986c89245fec75d0f9a34f744bf74d6e0f901c12ea25edd60c43d22f6644fa294534cac1c581b0cbf5d9765fc18fe6c223dcff4a85c7eeaf4cb1a9a889c236778b85e69d50d482743664bdeade11b4ced78c3d0b62ba07f98a898c6e89241ed6522fdfc430b75593673d43d695082b0114b25f231c8a141be953290b1a3855adc0146adee0b784fce2cf8243838bdcdbcf4e0dbcc2a9945deea1d02858a9e9dc54f0e818b81d024bd9b2e052a73fb59d037ab526c78faadfcdecc15f2a1d843e84aabc403e84b2fefbfbec982f22b89a2be560002d45ae12a8a2d00f0a3f55e26789a593fb8bdf20efb8a51e3d0dad9ad2caec39ea7392c58eebebc7201c78276f0127e43d5c8efef6e17ca522d69586a9e096efe80844c38841640238584936d8a96c0ba41dc0dc96a11623ff1e70ef54a9c43ec3cd0359dfdf55c8f8c306110d833d7de7a35f015369bf6d92b3b6f0f7dc717c84e51ce475df451b9a6a91c8d564aeb389267082b9cea77f09c6c6490084da3820f80d3e62bbd41a6540591c6c5cf2a18e4e829b82a6780b6b1f66d96fcfb1639a335a78f8c3ecf381148b2625859e514d35eb8c4acc98f7f8220e1827d7745f1f054691eeb1625e2d238ae03c93991058c1567be4938de2e60537749ee81f327f1f1e586ee3af4ccf53b29741c1bb0e774a1d27672ec27b43719d3710e9fd8634213738d98844717c8b1f707bd42f4077c9e59eb539f9cb32c11b47bcb7cb3efd3bf4994e90166a5ae380c821d2640fa99df59978e9b7e50f0b830943de787b1bf99e14edcdfe8565556ae2a8c0552d67898fd13551c007eb779edb60e85210a418cf0a4a41764fe9ece74f5d8000d168fab61588c5549113e8d8a059f17699d976fc7dc68cfd0ec404ef0c7eca459fbad1c40317d81b95a94b037cf96ba677697cfdce4c2c4e02cea296f25e556c02381ca891ddb6adcb0535e262b26290000c542e7616d63b211c16f86048079ca5167598aece3288f86658249e939cb6b59b6cdd3fce0e9ea81a3bb3f88908c600ea031b0028f12632d7ac2f81e54f7e7eb70ba70bc937571b242c4ef228f801b6a4376d11eabadaebb1322823eb30faf6cf21a8b38a769824e8b7009ff278f80ac2af39f0943a29458d127eabae81d2915557b09e3c49f8c22564edea93e8717306fb198dcc92eb3c9212f03dac94fa3fa1fa4e1dbd2119e024639f0ddc87cd906d3317c6ebc6e698257f73912ff46fe8d9adbd3f57ecc78cea5c1eb04ac5fd1bb79a53921fddaffd2d34f444b54208096cbd2aa3e26ca01359b05c10ff36e98e1ac97d51380c99e1b685928eced0d2f1e754001e7023d2473596feb7c7601619277dd7e844bd5544e7e360f8e4223fbd9e24b3fb69a34ced39bf7590fb853e44031d075fe647190ac7811522c73a6c6033457c14c415e4a84663d2540784a1cbb4a398f1d8612f4f3d334576c99d5721bbeac95cc34d18080e3b1365b6844152b8259c8d4618597f291f2b9e8812ab7729e108a8d44487f8993faabf6c6a8f49db727f17cdfec43b34c39cfdd3916fa6953e34f316100368c7b2836c11dcd4710986980356b7ec4ba23fab5cc5a8c6cacb61cc65570231407ca647946393031986cf4736280ed2d7976d66618fc240191455ae405f1d62145297179c040a707093fb8f60f5a3738b8bf78bbdf952478da7e9d3c892af5b83cd9dd4f00fcfa13beb9e6988e3c4b4e5300e3757a93efaef9023fb9d7442cb1a49d7efdec32ac1f98e6227cad38538f6383c3b6efca2fda7c101ec548c3549e7ac5e737478343ca47cdcd65acb71e0eade28c684b69785ae1fe31aaec713834b6635938d7d66426e965498978e4b467f6132daa6026c39dcbf95656b9be5c074badc18b5a74e12967b45e23099fa765ea5c8c18f0feae94755827e494f251ae96882b5c5f6d54713de02501faef1fcb59bf0d66f9d0cd3a493b139237aefdbd402a3df9dd5beb2887a055261a08047be52fa51f61636255870366e837f20d0f83b8557fa4a003647152ee27bd34b5af52743d4c431ff4a116ae1184c810e8397ef2a056845c6e3b5c0beafbf8f78488102412e04e47fb87be9a9ddc075ab519f424ebf821da659b18ae3b61a7b243ff94e3d1ba420cb342db7b8060937749892a7954d3ba5e63017703f5224602616ff6d3fec42444b2524f97dfa467d9db91681dce08de5ccb1ac2bf6cb5e6c1d586b2fc62e78b0bc23e1924a4f023adb39803fd6c3d52c40b13df9c6f54bb2b4ef88f5d0ffdfef13ae46dbf75aa6457da3bdc1781dc814b0b69debee7456aa7f75571caef87f624ef703fea75f136cc7f90af0ae558cf3de5e8cc92f3e803bd46e05f42e4167af8136db6982ad26a52778e1fefcbabe61a57f00cbf04e3c82445c04bbd8832b8bb9a7cb854a22f98cd7b422a7abafe6a00571539802e56f036d5a26d79a86cb100b90ae168d2406c2c0b9c5274ad69298e7983f4b30e006cf4882e90ca8af4e445dc06d0639231638dd39929065d920af913cc7284619fcacab0023893352468eec73d7014407e5d4bca9e49d412ffb12e68610c26206de0b3282e925b83389cbdfbc41cf279440a13838a1431ea4f1a371b6b143b914238773d171bc7b44c07729e8723fe51b8180fc9c9be6694477132cb82b22b2512518266781e687fcd460995ed581059d3c692ecbdc8daf3c76e5a5bc8e57973fed5fb3465a3dcb5557f92dba1e212f9bda66fc4829e10ce3e8b6c117b1214cb246211c861eaabf8ccaa94aedd58349399e619c2dc587719d7901d2cd85ced669d0ea898c4f127d1a4cf274aa0405d225605edf425dc9b7375c8ac2940bb369eec586097f0cc07940ecc8bd400976b9b36027a040be6e64a2fa4f7ba5d59ce9b4f76192d260d665290b20faa3a6a941939a0b3042ef4d8f9b980c71a13496b104965e1c3dab25cb46147bca6170baa0237c8a5cd1c437e43a50302490462585410f65e03186df5fc2c5bcd89f6d6a4ac34c971f0579070ab6e9a6a84159b2910a7ba797fb09dbd3ab88c23951b1a91df8cfc2d13de85dc715e2a111458acc4d640a59c199faa2bb28ec3309864fd8a6997ac89833853101a08198aa6ab3e5167b4e8e55843efae1ecd3fc6507f3a97bf2f8c4c4da4896c788a17a5fe8d8c3f79fe41dd7f4497380f1ffc8f8d6cc2c2dead697e4947cfe680a0e2b5100743444536134cde4378b0b1fe6ddc09dfe8d618f93edffeb7d097a37a19248be0bf9c4f536a484a5fc96f18f2eb4f6462b20bee241ce16b4790c854bca10914e3ba98eb0970765571a8ad45baba39d20b8c1bbb7c65717e265f5fc5edefb130aada09aa7f2c50c45de6de7327faef192977f499b7aed9e73c2ecb97f7256f89fc8b4834670f798438fac5a5045d61a7f429eba77de37517b984b0acfbd6f494a1414b0fc040244bb62a19150e0c15e5315b2618d05429263dd1847accc5de9baca08edc921ed9a0af00175c118ab801da9980098fc4a2bf16ba73e580000b49129a5fba00a1f2c45c0d0939be83ad93569dd61330913e8b381f9aff6d6a584862d636c1a4989dd3fd14853bf033be56f21a3cf1eb95d7df7c6436ff3d5a8f472bf4a3fa8b0b0741d953d9644e0ec801d4154336357d2d1492c6d336b9101827c1401898ecdca5a66c6f727d23d3ebb95530ecfee0f7649c221d2c131e56d37a8d422b0803ed0d623a2de36e9279c3c1c806654fbce9305cbb44210e282fa53c72f813440fd0cbfff492716c4a06cf99f4809481d51a03a88911f48f25db6784e16f3a251d5fb75fca164911e4a88d1b904b5372d8660d309f347dce2810552a4789af371f3e67418433cdb0d69a4fc562514cb396141f31312fab85f68c1ecd9d03ba37b40934535cc3e53c71a3a51663a479eca63dc5c15a387e5753cfa806402b6426b8dcaace2553d219b2ae02bd45fd4fde6e3e1bd6370d3e8d558aea69854381f1dad0fe2bbf1a73043f03aafe81c3a3d386c758abcb45cc537bf40d459e138f418802ec61abcad5e333389d74ea941eb5f26b25ed7642e0135fd8e3e2fc998613023dd5b804e2cf1a80ea60b353535b1446e3ebb542c1c15d87c6f5a4716455c8a9f52380161a5d23e9678417fe7ed64760e14c1390bcf73e1d531bb3548d7b9df25b6f85512667af396fad73110d1ab69a8ecdddaf29dc3701a5d927e599f5c2af293a6b276da7a5c917298ea24c2366d5e91593605fcbc4d6462", 0x2000, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'ovf\x00', 0x1, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x0, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xcd}}, 0x44) r6 = socket$kcm(0xa, 0x2, 0x0) r7 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x11}, {@remote, 0x4e1d, 0x3, 0xcd}}, 0x44) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) getsockopt(r4, 0x200000000114, 0x58, 0x0, &(0x7f0000000040)) 6.979826017s ago: executing program 1 (id=636): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0x81, 0x43) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b036800e0ff64000212475400f6a13bb10000000800894f4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 6.751889252s ago: executing program 0 (id=638): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(0x0, 0x47b, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0x1c) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000014000105000000000000000010"], 0x24}}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x5) r5 = socket$l2tp6(0xa, 0x2, 0x73) dup3(r5, r4, 0x0) 6.751670742s ago: executing program 1 (id=639): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='lock me'], 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001a00010029bd70000000000002202000000000000020000008001900ac1414bb05001a"], 0x2c}}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_getevents(r4, 0x4, 0x4, &(0x7f00000019c0)=[{}, {}, {}, {}], 0x0) io_submit(r4, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r3, 0x0}]) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b5, 0x8031, 0xffffffffffffffff, 0x0) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x4e22, @loopback}, 0x10) syz_open_procfs(0xffffffffffffffff, 0x0) 6.220153842s ago: executing program 3 (id=640): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) 5.26414869s ago: executing program 4 (id=641): socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3f) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x17) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x31b}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc058534b, &(0x7f0000000080)={{}, {0x85}}) syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8002, 0x0) read$msr(r3, &(0x7f0000019540)=""/102400, 0x19000) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) syz_open_dev$ttys(0xc, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3e) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.107037353s ago: executing program 0 (id=642): bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f00000000c0)={0x800, 0x4, 0x7, 0x6, 0xf97}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) sendmsg$802154_dgram(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20044005}, 0x0) 5.106863313s ago: executing program 3 (id=643): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_REWIND(r1, 0xc0844123, &(0x7f0000000180)=0x4e3) 3.244141019s ago: executing program 0 (id=644): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket(0x25, 0x1, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x9c, &(0x7f0000000000)={0x0, 0xec25, 0x0, 0x2, 0x40000333}, &(0x7f0000000240)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd_index=0x4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001800)=""/211, 0xd3}], 0x1}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x64, r6, 0x1, 0xffffffff, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x15}}}]}, 0x64}}, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[], 0x19) openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) syz_emit_vhci(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffff000, 0x1000000000000}) 3.243994039s ago: executing program 3 (id=645): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000140)={0x0, 0x0}) 2.983812973s ago: executing program 1 (id=646): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) sched_setaffinity(0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x2043}}}, 0x7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 1.994549372s ago: executing program 4 (id=647): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x1000, 0x200, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x207a98, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40000) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card1/oss_mixer\x00', 0x1, 0x0) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000400)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r1, 0x560a, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x20, 0x2, "08000000f28f00"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, r2) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x42400) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r4, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000540), 0xffffffffffffffff) socket$inet6(0x10, 0x2, 0x0) 1.836099355s ago: executing program 0 (id=648): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x0, 0x3}, &(0x7f0000002000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/113, 0x71}], 0x1) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.775790257s ago: executing program 3 (id=649): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x50, r1, 0x101, 0x4, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0xc, 0x3, 0x2, 0x0, {0x1, 0x5, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x6, 0x2, 0x4}}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x999}]]}, 0x50}}, 0x4800) 1.736127547s ago: executing program 1 (id=650): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000040), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x5d032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) io_submit(0x0, 0x1, &(0x7f0000001d00)=[0x0]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000180), 0x2800000000, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffff9c, 0x0, 0x4000, 0x100, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r4, 0x0, &(0x7f00004fa000/0x4000)=nil, 0x4000}) mmap$snddsp_status(&(0x7f0000ad4000/0x3000)=nil, 0x1000, 0x8, 0x40010, 0xffffffffffffffff, 0x82000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x8840) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0xa, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r5, 0x1, 0x1, 0x59}, &(0x7f0000000140)=0x10) 520.89146ms ago: executing program 3 (id=651): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x1, 0x1, 0x0, 0x4, 0x1, 0x5, [{0x0, 0x4, 0x9}]}]}, {0x0, [0x61, 0x2e, 0x61]}}, &(0x7f0000000f40)=""/4089, 0x35, 0xff9, 0x1}, 0x28) 407.934492ms ago: executing program 1 (id=652): ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000000c0)={0x10000000, 0x71, 0x200000009}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$tipc(0x1e, 0x0, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x51}, 0x80) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) socket(0x2, 0x80805, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x3, 0x14a}}) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) ioctl$VT_RELDISP(r0, 0x5605) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1400000013000104000000000000000002"], 0x14}], 0x1}, 0x0) 407.760972ms ago: executing program 4 (id=653): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000380)='./bus\x00', 0x322020, &(0x7f0000000140)=ANY=[], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) 405.862672ms ago: executing program 0 (id=654): r0 = syz_open_procfs(0x0, &(0x7f0000000ec0)='net/vlan/config\x00') pread64(r0, &(0x7f0000000b00)=""/209, 0xd1, 0x400000044) 256.669485ms ago: executing program 3 (id=655): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="12000000040000000400000001"], 0x48) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000040), &(0x7f00000000c0)=@udp6=r4, 0x1}, 0x20) recvfrom(r4, 0x0, 0x0, 0x2101, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x400, 0x0) r5 = syz_open_procfs(0x0, 0x0) fchdir(r5) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r7 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=0x0) timer_settime(r8, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(r8, 0x0, &(0x7f0000000000), &(0x7f0000000080)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@loopback, 0x0, 0x0, 0x1, 0x1, 0x4}, 0x20) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000300)={0x0, 0x0, 0xffffffffffffffff, 0xff}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="140100001f00011f00fd8db125bb2844"], 0x114}], 0x1}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r6, 0x4008550d, 0x0) 248.054165ms ago: executing program 0 (id=656): r0 = socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f00000000c0)={0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r5 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000840), 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0xcec, 0xf}, 0x1c) r6 = socket(0xa, 0xa, 0x0) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) 0s ago: executing program 4 (id=657): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000580)='kfree\x00', r0}, 0x18) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[@code={0xa, 0x75, {"f326460f019f00200000420f01c5470f01c248b8f61e0000000000000f23c80f21f835080030000f23f8c462bd9791040000000f07c7442400e3420000c744240264000000c7442406000000000f011c24c421e3d040000f009f082c000066660f388000"}}], 0x75}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x805, 0x7, 0xf, 0x120000, 0xff, 0x0, 0x8, 0xeb, 0x2, 0x0, 0x101, 0x6, 0x1], 0xeeee8000, 0x141200}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) sync_file_range(r1, 0x9, 0x5, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000240)=ANY=[]) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000380)={[{0x1, 0x80, 0x0, 0x80, 0x9, 0x1, 0x9, 0x9, 0x1, 0x5, 0x0, 0x0, 0xd}, {0x3, 0x0, 0xff, 0x1f, 0xff, 0x5, 0x0, 0xff, 0x59, 0x5, 0x7, 0x10, 0x200}, {0x3, 0x80, 0x1, 0xe, 0x3, 0x5, 0x7f, 0x2, 0x3, 0x4, 0x7, 0x4f, 0x36f}], 0x9}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000100)='./file0/../file0/../file0\x00', 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x143862, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') socket$key(0xf, 0x3, 0x2) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000100040000000000000004000000"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4000804) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.151' (ED25519) to the list of known hosts. syzkaller login: [ 80.846143][ T5779] cgroup: Unknown subsys name 'net' [ 80.986593][ T5779] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.680807][ T5779] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.446031][ T5791] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.475079][ T5799] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.481447][ T5795] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.486107][ T5799] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.489536][ T5791] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.497772][ T5799] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.510542][ T5791] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.513393][ T5799] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.524837][ T5795] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.525951][ T5799] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.539280][ T5795] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.542226][ T5799] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.548386][ T5795] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.555202][ T5799] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.561688][ T5795] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.567899][ T5799] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.574941][ T5795] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.589015][ T5795] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.629024][ T5795] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.638192][ T5795] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.646038][ T5795] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.656249][ T5795] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.664427][ T5795] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.685926][ T5795] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.121771][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 85.224688][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 85.349388][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 85.415629][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.423999][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.431911][ T5796] bridge_slave_0: entered allmulticast mode [ 85.439612][ T5796] bridge_slave_0: entered promiscuous mode [ 85.470230][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.477462][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.484915][ T5796] bridge_slave_1: entered allmulticast mode [ 85.492119][ T5796] bridge_slave_1: entered promiscuous mode [ 85.512659][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 85.543487][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.550757][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.558553][ T5792] bridge_slave_0: entered allmulticast mode [ 85.565579][ T5792] bridge_slave_0: entered promiscuous mode [ 85.599017][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.606226][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.613814][ T5792] bridge_slave_1: entered allmulticast mode [ 85.621174][ T5792] bridge_slave_1: entered promiscuous mode [ 85.680397][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.734277][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.746040][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.774169][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.781588][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.789775][ T5800] bridge_slave_0: entered allmulticast mode [ 85.796786][ T5800] bridge_slave_0: entered promiscuous mode [ 85.806528][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.846423][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.853673][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.861496][ T5800] bridge_slave_1: entered allmulticast mode [ 85.868849][ T5800] bridge_slave_1: entered promiscuous mode [ 85.893522][ T5796] team0: Port device team_slave_0 added [ 85.903235][ T5796] team0: Port device team_slave_1 added [ 85.973294][ T5792] team0: Port device team_slave_0 added [ 85.988863][ T5792] team0: Port device team_slave_1 added [ 86.042420][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.050918][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.058418][ T5788] bridge_slave_0: entered allmulticast mode [ 86.065467][ T5788] bridge_slave_0: entered promiscuous mode [ 86.082678][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.095253][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.117238][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.124506][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.150951][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.162933][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.171221][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.178918][ T5788] bridge_slave_1: entered allmulticast mode [ 86.185968][ T5788] bridge_slave_1: entered promiscuous mode [ 86.222787][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.229919][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.256714][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.303882][ T5800] team0: Port device team_slave_0 added [ 86.311094][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.318272][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.344368][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.363183][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.370249][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.396589][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.457081][ T5800] team0: Port device team_slave_1 added [ 86.490201][ T5796] hsr_slave_0: entered promiscuous mode [ 86.496843][ T5796] hsr_slave_1: entered promiscuous mode [ 86.506189][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.543208][ T5792] hsr_slave_0: entered promiscuous mode [ 86.551148][ T5792] hsr_slave_1: entered promiscuous mode [ 86.557322][ T5792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.565222][ T5792] Cannot create hsr debugfs directory [ 86.575228][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.608394][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.615399][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.641505][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.671042][ T5795] Bluetooth: hci0: command tx timeout [ 86.676879][ T5795] Bluetooth: hci2: command tx timeout [ 86.678107][ T50] Bluetooth: hci1: command tx timeout [ 86.694717][ T5788] team0: Port device team_slave_0 added [ 86.715722][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.723187][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.747846][ T50] Bluetooth: hci3: command tx timeout [ 86.751252][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.778580][ T5788] team0: Port device team_slave_1 added [ 86.845876][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.852957][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.879708][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.892686][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.899709][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.926984][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.996452][ T5800] hsr_slave_0: entered promiscuous mode [ 87.003394][ T5800] hsr_slave_1: entered promiscuous mode [ 87.009839][ T5800] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.017408][ T5800] Cannot create hsr debugfs directory [ 87.118310][ T5788] hsr_slave_0: entered promiscuous mode [ 87.125795][ T5788] hsr_slave_1: entered promiscuous mode [ 87.132568][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.140568][ T5788] Cannot create hsr debugfs directory [ 87.574544][ T5796] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.589895][ T5796] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.610636][ T5796] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.649245][ T5796] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.719647][ T5792] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.733994][ T5792] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.746716][ T5792] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.764537][ T5792] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.873530][ T5800] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.887188][ T5800] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.908027][ T5800] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.951510][ T5800] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.005134][ T5788] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.015916][ T5788] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.031384][ T5788] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.048052][ T5788] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.083361][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.135964][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.183550][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.190939][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.209195][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.235357][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.242551][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.280539][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.304961][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.342310][ T3442] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.349540][ T3442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.360168][ T3442] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.367305][ T3442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.408946][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.463932][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.471092][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.483382][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.490522][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.580742][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.655130][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.696086][ T3442] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.703326][ T3442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.741914][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.749145][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.752600][ T50] Bluetooth: hci1: command tx timeout [ 88.761440][ T5795] Bluetooth: hci0: command tx timeout [ 88.763251][ T5793] Bluetooth: hci2: command tx timeout [ 88.828185][ T50] Bluetooth: hci3: command tx timeout [ 89.011635][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.122674][ T5792] veth0_vlan: entered promiscuous mode [ 89.145479][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.174687][ T5792] veth1_vlan: entered promiscuous mode [ 89.252373][ T5792] veth0_macvtap: entered promiscuous mode [ 89.293639][ T5792] veth1_macvtap: entered promiscuous mode [ 89.314538][ T5796] veth0_vlan: entered promiscuous mode [ 89.353417][ T5796] veth1_vlan: entered promiscuous mode [ 89.370140][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.388913][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.417289][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.455559][ T5792] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.464996][ T5792] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.478490][ T5792] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.487331][ T5792] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.515526][ T5796] veth0_macvtap: entered promiscuous mode [ 89.526950][ T5796] veth1_macvtap: entered promiscuous mode [ 89.592316][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.606521][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.619016][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.632037][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.643146][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.654792][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.693992][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.714393][ T5796] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.723545][ T5796] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.733437][ T5796] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.743148][ T5796] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.802736][ T5800] veth0_vlan: entered promiscuous mode [ 89.837064][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.845731][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.863871][ T5800] veth1_vlan: entered promiscuous mode [ 89.941539][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.961073][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.971725][ T5788] veth0_vlan: entered promiscuous mode [ 90.016319][ T5800] veth0_macvtap: entered promiscuous mode [ 90.042650][ T5788] veth1_vlan: entered promiscuous mode [ 90.056892][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.079333][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.091189][ T5800] veth1_macvtap: entered promiscuous mode [ 90.200924][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.212837][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.226066][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.237183][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.247415][ T5882] syz.0.1[5882]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 90.255827][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.282611][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.285050][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.305174][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.315932][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.330027][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.341010][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.354755][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.365431][ T5788] veth0_macvtap: entered promiscuous mode [ 90.391600][ T5800] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.414307][ T5800] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.423694][ T5800] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.433296][ T5800] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.469752][ T5788] veth1_macvtap: entered promiscuous mode [ 90.532710][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.545989][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.560342][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.572964][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.587159][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.600546][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.625823][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.656405][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.689072][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.699659][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.711247][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.721671][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.749330][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.764607][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.806369][ T5788] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.825614][ T5788] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.830317][ T50] Bluetooth: hci1: command tx timeout [ 90.840074][ T50] Bluetooth: hci2: command tx timeout [ 90.845508][ T50] Bluetooth: hci0: command tx timeout [ 90.851341][ T5788] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.860403][ T5788] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.911002][ T50] Bluetooth: hci3: command tx timeout [ 91.059231][ T5882] loop0: detected capacity change from 0 to 32768 [ 91.095754][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.117292][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.121888][ T5882] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 91.142552][ T5882] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 91.233642][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.257948][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.269977][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.284746][ T5882] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 91.308667][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.325549][ T5880] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 91.337753][ T5880] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 91.444862][ T3416] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.481766][ T3416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.496909][ T5880] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 159ms [ 91.538682][ T5880] gfs2: fsid=syz:syz.0: jid=0: Done [ 91.544667][ T5882] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 91.745586][ T5884] loop2: detected capacity change from 0 to 32768 [ 92.237480][ T8] cfg80211: failed to load regulatory.db [ 92.889759][ T27] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 92.908071][ T50] Bluetooth: hci0: command tx timeout [ 92.908350][ T5795] Bluetooth: hci2: command tx timeout [ 92.913510][ T50] Bluetooth: hci1: command tx timeout [ 92.988049][ T5795] Bluetooth: hci3: command tx timeout [ 93.101191][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 93.124442][ T27] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 93.135982][ T27] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.161199][ T27] usb 2-1: config 0 has no interface number 0 [ 93.167378][ T27] usb 2-1: config 0 interface 8 altsetting 248 endpoint 0xD has invalid wMaxPacketSize 0 [ 93.198277][ T27] usb 2-1: config 0 interface 8 altsetting 248 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 93.225044][ T27] usb 2-1: config 0 interface 8 has no altsetting 0 [ 93.236775][ T27] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 93.248426][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.257340][ T27] usb 2-1: Product: syz [ 93.264709][ T27] usb 2-1: Manufacturer: syz [ 93.293821][ T27] usb 2-1: SerialNumber: syz [ 93.332555][ T27] usb 2-1: config 0 descriptor?? [ 93.587885][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 93.596239][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 93.864046][ T5901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6'. [ 93.890043][ T5889] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org. [ 94.257230][ T5903] loop2: detected capacity change from 0 to 32768 [ 94.264471][ T5903] ======================================================= [ 94.264471][ T5903] WARNING: The mand mount option has been deprecated and [ 94.264471][ T5903] and is ignored by this kernel. Remove the mand [ 94.264471][ T5903] option from the mount to silence this warning. [ 94.264471][ T5903] ======================================================= [ 94.299557][ C1] vkms_vblank_simulate: vblank timer overrun [ 94.332266][ T27] ath6kl: Failed to submit usb control message: -71 [ 94.368583][ T27] ath6kl: unable to send the bmi data to the device: -71 [ 94.391014][ T27] ath6kl: Unable to send get target info: -71 [ 94.409897][ T27] ath6kl: Failed to init ath6kl core: -71 [ 94.421447][ T27] ath6kl_usb: probe of 2-1:0.8 failed with error -71 [ 94.445364][ T27] usb 2-1: USB disconnect, device number 2 [ 94.470659][ T5903] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 95.198145][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.222201][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 95.231528][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 95.311574][ T5910] loop0: detected capacity change from 0 to 16 [ 95.328489][ T5796] ocfs2: Unmounting device (7,2) on (node local) [ 95.621645][ T5910] erofs: (device loop0): mounted with root inode @ nid 36. [ 95.704546][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 95.713926][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 96.011717][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 96.020468][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.029468][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 96.225609][ T28] audit: type=1800 audit(1758232413.332:2): pid=5910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7" name="file1" dev="loop0" ino=86 res=0 errno=0 [ 96.597460][ T5919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7'. [ 96.606383][ T5919] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.703359][ T5919] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.718124][ T5923] loop2: detected capacity change from 0 to 512 [ 97.910718][ T5923] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 98.230023][ T5923] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 98.431371][ T5929] loop3: detected capacity change from 0 to 512 [ 98.471719][ T5923] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 98.511780][ T5929] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 98.539228][ T5923] System zones: 1-12 [ 98.579379][ T5929] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 98.606295][ T5934] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 98.623108][ T5929] System zones: 1-12 [ 98.629509][ T5923] EXT4-fs (loop2): 1 truncate cleaned up [ 98.635346][ T5929] EXT4-fs (loop3): 1 truncate cleaned up [ 98.636805][ T5923] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.644095][ T5929] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.255984][ T5923] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10'. [ 99.256100][ T5923] netlink: 212 bytes leftover after parsing attributes in process `syz.2.10'. [ 99.402227][ T5929] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12'. [ 99.402251][ T5929] netlink: 212 bytes leftover after parsing attributes in process `syz.3.12'. [ 99.700613][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.754989][ T5934] loop1: detected capacity change from 0 to 8192 [ 99.796464][ T5934] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 99.810929][ T5934] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 99.820736][ T5934] REISERFS (device loop1): using ordered data mode [ 99.828192][ T5934] reiserfs: using flush barriers [ 99.837546][ T5934] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 99.857252][ T5934] REISERFS (device loop1): checking transaction log (loop1) [ 99.880552][ T5934] REISERFS (device loop1): Using r5 hash to sort names [ 99.900573][ T5934] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 99.952161][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.063586][ T5944] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14'. [ 100.341856][ T5947] loop3: detected capacity change from 0 to 512 [ 100.387767][ T5947] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 100.419753][ T5947] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 100.428369][ T5880] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 100.445867][ T5947] System zones: 1-12 [ 100.474841][ T5947] EXT4-fs (loop3): 1 truncate cleaned up [ 100.484762][ T5947] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.622017][ T5880] usb 3-1: Using ep0 maxpacket: 32 [ 100.638538][ T5880] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.670984][ T5880] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 100.721290][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.787892][ T5880] usb 3-1: Product: syz [ 100.796694][ T5880] usb 3-1: Manufacturer: syz [ 100.816332][ T5880] usb 3-1: SerialNumber: syz [ 100.926013][ T5952] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15'. [ 100.935905][ T5952] netlink: 212 bytes leftover after parsing attributes in process `syz.3.15'. [ 101.638964][ T5880] usb 3-1: config 0 descriptor?? [ 101.649814][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.651655][ T5880] usb 3-1: bad CDC descriptors [ 101.664617][ T5880] usb 3-1: unsupported MDLM descriptors [ 102.075552][ T5950] loop0: detected capacity change from 0 to 32768 [ 102.091876][ T5950] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 102.123895][ T5950] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 102.202278][ T5950] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 102.217628][ T5954] loop3: detected capacity change from 0 to 32768 [ 102.228715][ T5954] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 102.236163][ T5954] CPU: 1 PID: 5954 Comm: syz.3.17 Not tainted syzkaller #0 [ 102.243496][ T5954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 102.253594][ T5954] Call Trace: [ 102.256885][ T5954] [ 102.259837][ T5954] dump_stack_lvl+0x16c/0x230 [ 102.264634][ T5954] ? show_regs_print_info+0x20/0x20 [ 102.269845][ T5954] ? load_image+0x3b0/0x3b0 [ 102.274388][ T5954] sysfs_create_dir_ns+0x256/0x280 [ 102.279526][ T5954] ? sysfs_warn_dup+0xa0/0xa0 [ 102.284224][ T5954] ? do_raw_spin_unlock+0x121/0x230 [ 102.289443][ T5954] kobject_add_internal+0x6b8/0xc70 [ 102.294669][ T5954] kobject_init_and_add+0x126/0x190 [ 102.299891][ T5954] ? lockdep_softirqs_off+0x430/0x430 [ 102.305286][ T5954] ? kobject_add+0x220/0x220 [ 102.309902][ T5954] ? __init_swait_queue_head+0xa9/0x150 [ 102.315461][ T5954] gfs2_sys_fs_add+0x238/0x470 [ 102.320245][ T5954] ? gfs2_recover_set+0x250/0x250 [ 102.325291][ T5954] ? apply_workqueue_attrs+0x180/0x180 [ 102.330818][ T5954] gfs2_fill_super+0x1323/0x1f80 [ 102.335834][ T5954] ? gfs2_reconfigure+0xb10/0xb10 [ 102.340906][ T5954] ? setup_bdev_super+0x56b/0x660 [ 102.345951][ T5954] get_tree_bdev+0x3e4/0x510 [ 102.350561][ T5954] ? end_current_label_crit_section+0x170/0x170 [ 102.356821][ T5954] ? gfs2_reconfigure+0xb10/0xb10 [ 102.361874][ T5954] ? setup_bdev_super+0x660/0x660 [ 102.366935][ T5954] gfs2_get_tree+0x51/0x1e0 [ 102.371461][ T5954] vfs_get_tree+0x8c/0x280 [ 102.375888][ T5954] do_new_mount+0x24b/0xa40 [ 102.380406][ T5954] __se_sys_mount+0x2da/0x3c0 [ 102.385099][ T5954] ? __x64_sys_mount+0xc0/0xc0 [ 102.389880][ T5954] ? lockdep_hardirqs_on+0x98/0x150 [ 102.395116][ T5954] ? __x64_sys_mount+0x20/0xc0 [ 102.399908][ T5954] do_syscall_64+0x55/0xb0 [ 102.404350][ T5954] ? clear_bhb_loop+0x40/0x90 [ 102.409046][ T5954] ? clear_bhb_loop+0x40/0x90 [ 102.413741][ T5954] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 102.419667][ T5954] RIP: 0033:0x7f6282d9034a [ 102.424103][ T5954] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.443735][ T5954] RSP: 002b:00007f6283b3de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 102.452175][ T5954] RAX: ffffffffffffffda RBX: 00007f6283b3def0 RCX: 00007f6282d9034a [ 102.460165][ T5954] RDX: 0000200000000140 RSI: 0000200000037f80 RDI: 00007f6283b3deb0 [ 102.468150][ T5954] RBP: 0000200000000140 R08: 00007f6283b3def0 R09: 0000000002810000 [ 102.476148][ T5954] R10: 0000000002810000 R11: 0000000000000246 R12: 0000200000037f80 [ 102.484227][ T5954] R13: 00007f6283b3deb0 R14: 0000000000037fa2 R15: 00002000000001c0 [ 102.492249][ T5954] [ 102.499669][ T5954] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 102.514991][ T5954] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 102.537489][ T5880] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 102.554626][ T5880] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 102.811966][ T5880] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 257ms [ 102.843167][ T5880] gfs2: fsid=syz:syz.0: jid=0: Done [ 102.854210][ T5950] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 103.123063][ T5837] usb 3-1: USB disconnect, device number 2 [ 104.688088][ T5978] loop2: detected capacity change from 0 to 512 [ 104.711332][ T5978] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 104.753567][ T5973] loop3: detected capacity change from 0 to 32768 [ 104.765912][ T5978] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 104.768010][ T5973] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 104.781359][ T5973] CPU: 1 PID: 5973 Comm: syz.3.21 Not tainted syzkaller #0 [ 104.788600][ T5973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 104.798702][ T5973] Call Trace: [ 104.802025][ T5973] [ 104.804998][ T5973] dump_stack_lvl+0x16c/0x230 [ 104.809745][ T5973] ? show_regs_print_info+0x20/0x20 [ 104.815002][ T5973] ? load_image+0x3b0/0x3b0 [ 104.819577][ T5973] sysfs_create_dir_ns+0x256/0x280 [ 104.824748][ T5973] ? sysfs_warn_dup+0xa0/0xa0 [ 104.829476][ T5973] ? do_raw_spin_unlock+0x121/0x230 [ 104.834727][ T5973] kobject_add_internal+0x6b8/0xc70 [ 104.839983][ T5973] kobject_init_and_add+0x126/0x190 [ 104.845218][ T5973] ? lockdep_softirqs_off+0x430/0x430 [ 104.850615][ T5973] ? kobject_add+0x220/0x220 [ 104.855236][ T5973] ? __init_swait_queue_head+0xa9/0x150 [ 104.860799][ T5973] gfs2_sys_fs_add+0x238/0x470 [ 104.865585][ T5973] ? gfs2_recover_set+0x250/0x250 [ 104.870631][ T5973] ? apply_workqueue_attrs+0x180/0x180 [ 104.876114][ T5973] gfs2_fill_super+0x1323/0x1f80 [ 104.881119][ T5973] ? gfs2_reconfigure+0xb10/0xb10 [ 104.886175][ T5973] ? setup_bdev_super+0x56b/0x660 [ 104.891217][ T5973] get_tree_bdev+0x3e4/0x510 [ 104.895822][ T5973] ? end_current_label_crit_section+0x170/0x170 [ 104.902080][ T5973] ? gfs2_reconfigure+0xb10/0xb10 [ 104.907122][ T5973] ? setup_bdev_super+0x660/0x660 [ 104.912170][ T5973] gfs2_get_tree+0x51/0x1e0 [ 104.916692][ T5973] vfs_get_tree+0x8c/0x280 [ 104.921123][ T5973] do_new_mount+0x24b/0xa40 [ 104.925655][ T5973] __se_sys_mount+0x2da/0x3c0 [ 104.930353][ T5973] ? __x64_sys_mount+0xc0/0xc0 [ 104.935141][ T5973] ? lockdep_hardirqs_on+0x98/0x150 [ 104.940358][ T5973] ? __x64_sys_mount+0x20/0xc0 [ 104.945137][ T5973] do_syscall_64+0x55/0xb0 [ 104.949579][ T5973] ? clear_bhb_loop+0x40/0x90 [ 104.954334][ T5973] ? clear_bhb_loop+0x40/0x90 [ 104.959035][ T5973] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 104.965073][ T5973] RIP: 0033:0x7f6282d9034a [ 104.969546][ T5973] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.989186][ T5973] RSP: 002b:00007f6283b3de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 104.997634][ T5973] RAX: ffffffffffffffda RBX: 00007f6283b3def0 RCX: 00007f6282d9034a [ 105.005634][ T5973] RDX: 0000200000000140 RSI: 0000200000037f80 RDI: 00007f6283b3deb0 [ 105.013620][ T5973] RBP: 0000200000000140 R08: 00007f6283b3def0 R09: 0000000002810000 [ 105.021609][ T5973] R10: 0000000002810000 R11: 0000000000000246 R12: 0000200000037f80 [ 105.029600][ T5973] R13: 00007f6283b3deb0 R14: 0000000000037fa2 R15: 00002000000001c0 [ 105.037620][ T5973] [ 105.044610][ T5973] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 105.051032][ T5978] System zones: [ 105.058621][ T5973] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 105.153895][ T5978] 1-12 [ 105.199932][ T5978] EXT4-fs (loop2): 1 truncate cleaned up [ 105.237967][ T5978] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.852584][ T5985] netlink: 24 bytes leftover after parsing attributes in process `syz.2.23'. [ 105.861534][ T5985] netlink: 212 bytes leftover after parsing attributes in process `syz.2.23'. [ 106.814382][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.795487][ T6001] loop2: detected capacity change from 0 to 512 [ 107.811549][ T5998] netlink: 20 bytes leftover after parsing attributes in process `syz.0.28'. [ 107.893012][ T6001] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 107.963414][ T6001] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 108.082403][ T6001] System zones: 1-12 [ 108.086969][ T6001] EXT4-fs (loop2): 1 truncate cleaned up [ 108.094130][ T6001] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.098455][ T1186] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 108.479696][ T6010] netlink: 24 bytes leftover after parsing attributes in process `syz.2.26'. [ 108.488805][ T6010] netlink: 212 bytes leftover after parsing attributes in process `syz.2.26'. [ 109.131109][ T1186] usb 1-1: Using ep0 maxpacket: 32 [ 109.165881][ T1186] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.190458][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.201733][ T1186] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 109.217808][ T1186] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.226855][ T1186] usb 1-1: Product: syz [ 109.232112][ T1186] usb 1-1: Manufacturer: syz [ 109.238305][ T1186] usb 1-1: SerialNumber: syz [ 109.262162][ T1186] usb 1-1: config 0 descriptor?? [ 109.276403][ T1186] usb 1-1: bad CDC descriptors [ 109.285191][ T1186] usb 1-1: unsupported MDLM descriptors [ 109.679772][ T6012] loop2: detected capacity change from 0 to 32768 [ 109.704307][ T6012] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 109.713028][ T6012] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 109.745466][ T6012] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 109.757113][ T1186] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 109.784920][ T1186] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 109.923797][ T1186] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 138ms [ 109.972859][ T1186] gfs2: fsid=syz:syz.0: jid=0: Done [ 109.986687][ T6012] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 110.075747][ T5996] loop3: detected capacity change from 0 to 32768 [ 110.119289][ T5996] gfs2: Unknown parameter '' [ 110.308984][ T28] audit: type=1326 audit(1758232427.462:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5995 comm="syz.3.27" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6282d8eba9 code=0x0 [ 110.796633][ T27] usb 1-1: USB disconnect, device number 2 [ 111.933427][ T6033] loop3: detected capacity change from 0 to 512 [ 112.187986][ T6033] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 112.266838][ T6037] netlink: 20 bytes leftover after parsing attributes in process `syz.2.40'. [ 112.317055][ T6033] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 112.350357][ T6033] System zones: 1-12 [ 112.378278][ T6033] EXT4-fs (loop3): 1 truncate cleaned up [ 112.385455][ T6033] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.477348][ T6028] loop0: detected capacity change from 0 to 32768 [ 112.510273][ T6041] loop1: detected capacity change from 0 to 512 [ 112.562839][ T6041] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 112.578424][ T6028] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 112.623903][ T6028] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 112.631207][ T6041] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 112.651453][ T6041] System zones: 1-12 [ 112.657926][ T6041] EXT4-fs (loop1): 1 truncate cleaned up [ 112.665119][ T6041] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.665396][ T1186] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 112.960230][ T6045] netlink: 24 bytes leftover after parsing attributes in process `syz.3.34'. [ 112.969133][ T6045] netlink: 212 bytes leftover after parsing attributes in process `syz.3.34'. [ 114.258201][ T6047] netlink: 252 bytes leftover after parsing attributes in process `syz.1.35'. [ 114.578268][ T6028] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 114.609805][ T5837] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 114.632028][ T5837] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 114.874181][ T1186] usb 3-1: Using ep0 maxpacket: 32 [ 114.896541][ T5800] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.907098][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.926041][ T1186] usb 3-1: device descriptor read/all, error -71 [ 114.941744][ T5837] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 309ms [ 114.958585][ T5837] gfs2: fsid=syz:syz.0: jid=0: Done [ 114.963881][ T6028] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 115.007339][ T6028] gfs2: fsid=syz:syz.0: can't create logd thread: -4 [ 115.176152][ T6052] loop1: detected capacity change from 0 to 512 [ 115.200363][ T6052] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 115.226742][ T6052] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 115.247106][ T6052] System zones: 1-12 [ 115.268371][ T6052] EXT4-fs (loop1): 1 truncate cleaned up [ 115.275403][ T6052] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.700897][ T6059] netlink: 24 bytes leftover after parsing attributes in process `syz.1.37'. [ 115.709964][ T6059] netlink: 212 bytes leftover after parsing attributes in process `syz.1.37'. [ 116.457349][ T5800] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.169076][ T6063] loop3: detected capacity change from 0 to 1764 [ 117.860113][ T6074] (null): rxe_set_mtu: Set mtu to 1024 [ 117.885248][ T6079] loop2: detected capacity change from 0 to 512 [ 117.931298][ T6079] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 117.969679][ T6079] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 118.001152][ T6079] System zones: 1-12 [ 118.039110][ T6079] EXT4-fs (loop2): 1 truncate cleaned up [ 118.062989][ T6079] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.489234][ T6090] netlink: 24 bytes leftover after parsing attributes in process `syz.2.45'. [ 118.498303][ T6090] netlink: 212 bytes leftover after parsing attributes in process `syz.2.45'. [ 118.821067][ T6092] netlink: 20 bytes leftover after parsing attributes in process `syz.3.47'. [ 118.854721][ T6074] infiniband syz1: set active [ 118.907492][ T6074] infiniband syz1: added syz_tun [ 119.059759][ T6074] RDS/IB: syz1: added [ 119.064756][ T6074] smc: adding ib device syz1 with port count 1 [ 119.097451][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.105191][ T6074] smc: ib device syz1 port 1 has pnetid [ 119.149786][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 120.251684][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 120.339850][ T6096] loop2: detected capacity change from 0 to 8192 [ 120.660548][ T6096] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 120.703799][ T6096] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 120.714207][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.724650][ T6096] REISERFS (device loop2): using ordered data mode [ 120.731417][ T6096] reiserfs: using flush barriers [ 120.740342][ T23] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 120.750987][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.759062][ T23] usb 4-1: Product: syz [ 120.763403][ T23] usb 4-1: Manufacturer: syz [ 120.768108][ T23] usb 4-1: SerialNumber: syz [ 120.773722][ T6096] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 120.815348][ T23] usb 4-1: config 0 descriptor?? [ 120.837611][ T23] usb 4-1: bad CDC descriptors [ 120.843044][ T23] usb 4-1: unsupported MDLM descriptors [ 120.898337][ T6096] REISERFS (device loop2): checking transaction log (loop2) [ 120.938768][ T6096] REISERFS (device loop2): Using r5 hash to sort names [ 120.946783][ T6096] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 120.990271][ T6102] loop0: detected capacity change from 0 to 128 [ 121.012839][ T6102] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 121.055911][ T6102] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 121.306818][ T6105] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 2057, free_space(entry_count) 2 [ 121.379565][ T6105] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 564. Fsck? [ 121.841229][ T6105] REISERFS (device loop2): Remounting filesystem read-only [ 122.134095][ T6105] REISERFS error (device loop2): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 3 0x0 SD] stat data [ 122.204060][ T5792] FAT-fs (loop0): error, invalid access to FAT (entry 0xffff0000) [ 122.216311][ T5792] FAT-fs (loop0): Filesystem has been set read-only [ 122.252010][ T5792] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 122.992953][ T6114] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 123.175070][ T6110] loop0: detected capacity change from 0 to 32768 [ 123.219878][ T6110] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 123.261956][ T6110] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 123.285581][ T27] usb 4-1: USB disconnect, device number 2 [ 123.505489][ T6110] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 123.548105][ T5837] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 123.554980][ T5837] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 123.586495][ T6122] loop2: detected capacity change from 0 to 4096 [ 123.651710][ T6122] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 123.891419][ T5837] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 336ms [ 123.960151][ T5837] gfs2: fsid=syz:syz.0: jid=0: Done [ 123.998748][ T6122] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 124.062082][ T6110] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 125.026877][ T6132] loop1: detected capacity change from 0 to 512 [ 125.058233][ T6132] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 125.126705][ T6132] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 125.158294][ T6132] System zones: 1-12 [ 125.173409][ T6132] EXT4-fs (loop1): 1 truncate cleaned up [ 125.194230][ T6132] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.579647][ T6136] netlink: 24 bytes leftover after parsing attributes in process `syz.1.56'. [ 125.588677][ T6136] netlink: 212 bytes leftover after parsing attributes in process `syz.1.56'. [ 126.126484][ T6125] loop3: detected capacity change from 0 to 40427 [ 126.231522][ T6125] F2FS-fs (loop3): invalid crc value [ 126.232259][ T5800] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.292305][ T6125] F2FS-fs (loop3): Found nat_bits in checkpoint [ 126.535067][ T6125] F2FS-fs (loop3): Start checkpoint disabled! [ 126.617788][ T5850] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 126.798036][ T5850] usb 2-1: Using ep0 maxpacket: 32 [ 127.003116][ T6139] loop1: detected capacity change from 0 to 4096 [ 127.064836][ T6139] ntfs: ntfs_runlists_merge(): Run lists overlap. Cannot merge! [ 127.087874][ T6139] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Failed to merge runlists. [ 127.126757][ T6139] ntfs: (device loop1): ntfs_read_inode_mount(): ntfs_mapping_pairs_decompress() failed with error code -34. $MFT is corrupt. [ 127.181086][ T6139] ntfs: (device loop1): ntfs_read_inode_mount(): Failed. Marking inode as bad. [ 127.215755][ T6139] ntfs: (device loop1): ntfs_fill_super(): Failed to load essential metadata. [ 127.261415][ T5850] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 127.297743][ T5850] usb 2-1: can't read configurations, error -71 [ 127.500535][ T6152] loop3: detected capacity change from 0 to 1024 [ 127.544867][ T6155] netlink: 20 bytes leftover after parsing attributes in process `syz.2.63'. [ 127.580416][ T6152] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 127.601948][ T6152] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.763554][ T6148] loop0: detected capacity change from 0 to 32768 [ 127.867801][ T1186] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 127.867940][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 128.268385][ T1186] usb 3-1: Using ep0 maxpacket: 32 [ 128.285277][ T1186] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.315066][ T6166] netlink: 240 bytes leftover after parsing attributes in process `syz.0.64'. [ 128.468903][ T6164] loop3: detected capacity change from 0 to 512 [ 128.562045][ T1186] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 128.703822][ T6164] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 129.027683][ T1186] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.035750][ T1186] usb 3-1: Product: syz [ 129.042488][ T1186] usb 3-1: Manufacturer: syz [ 129.047127][ T1186] usb 3-1: SerialNumber: syz [ 129.073265][ T1186] usb 3-1: config 0 descriptor?? [ 129.110825][ T1186] usb 3-1: bad CDC descriptors [ 129.143257][ T1186] usb 3-1: unsupported MDLM descriptors [ 129.172105][ T6164] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 129.208796][ T6164] System zones: 1-12 [ 129.213472][ T6164] EXT4-fs (loop3): 1 truncate cleaned up [ 129.265657][ T6164] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.712147][ T6172] netlink: 24 bytes leftover after parsing attributes in process `syz.3.66'. [ 130.721205][ T6172] netlink: 212 bytes leftover after parsing attributes in process `syz.3.66'. [ 131.276252][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.541136][ T6169] loop0: detected capacity change from 0 to 32768 [ 131.563052][ T6169] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.67 (6169) [ 131.644076][ T6169] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 131.661852][ T6169] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 131.670771][ T6169] BTRFS info (device loop0): using free space tree [ 131.713237][ T6182] loop1: detected capacity change from 0 to 512 [ 131.727742][ T5850] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 131.747269][ T6182] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 131.780301][ T6182] EXT4-fs (loop1): invalid journal inode [ 131.786743][ T6182] EXT4-fs (loop1): can't get journal size [ 131.787542][ T6169] BTRFS info (device loop0): enabling ssd optimizations [ 131.808186][ T6169] BTRFS info (device loop0): auto enabling async discard [ 131.831786][ T6182] EXT4-fs (loop1): 1 truncate cleaned up [ 131.844501][ T6182] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.927912][ T5850] usb 4-1: Using ep0 maxpacket: 32 [ 131.939716][ T5850] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 131.958527][ T5850] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.977728][ T5850] usb 4-1: config 0 has no interface number 0 [ 131.994425][ T5850] usb 4-1: config 0 interface 8 altsetting 248 endpoint 0xD has invalid wMaxPacketSize 0 [ 132.017842][ T5850] usb 4-1: config 0 interface 8 altsetting 248 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 132.053202][ T5850] usb 4-1: config 0 interface 8 has no altsetting 0 [ 132.232956][ T5850] usb 4-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 132.252319][ T5850] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.265281][ T5850] usb 4-1: Product: syz [ 132.270319][ T5850] usb 4-1: Manufacturer: syz [ 132.275060][ T5850] usb 4-1: SerialNumber: syz [ 132.544271][ T23] usb 3-1: USB disconnect, device number 5 [ 132.589764][ T5850] usb 4-1: config 0 descriptor?? [ 133.024320][ T5850] ath6kl: Failed to submit usb control message: -71 [ 133.054013][ T5850] ath6kl: unable to send the bmi data to the device: -71 [ 133.082306][ T5850] ath6kl: Unable to send get target info: -71 [ 133.101864][ T5850] ath6kl: Failed to init ath6kl core: -71 [ 133.123772][ T5850] ath6kl_usb: probe of 4-1:0.8 failed with error -71 [ 133.160340][ T5850] usb 4-1: USB disconnect, device number 3 [ 133.181758][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.197808][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.355618][ T5792] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 133.360304][ T6203] loop2: detected capacity change from 0 to 47 [ 133.453428][ T5800] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.742747][ T6210] loop3: detected capacity change from 0 to 128 [ 133.756612][ T6210] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 133.792449][ T6210] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 133.950023][ T6211] xt_TPROXY: Can be used only with -p tcp or -p udp [ 134.385447][ T6215] loop0: detected capacity change from 0 to 1024 [ 134.423259][ T6215] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 134.457985][ T6215] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 134.493111][ T6215] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 134.533530][ T6208] loop1: detected capacity change from 0 to 32768 [ 134.540522][ T6215] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 134.555218][ T6215] EXT4-fs error (device loop0): ext4_get_journal_inode:5807: comm syz.0.72: inode #1: comm syz.0.72: iget: illegal inode # [ 134.574967][ T6208] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.75 (6208) [ 134.595741][ T6215] EXT4-fs (loop0): no journal found [ 134.622347][ T6208] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 134.666668][ T6208] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 134.688557][ T6215] netlink: 16 bytes leftover after parsing attributes in process `syz.0.72'. [ 134.708295][ T6208] BTRFS info (device loop1): max_inline at 7 [ 134.726990][ T6208] BTRFS info (device loop1): using free space tree [ 136.643788][ T6208] BTRFS info (device loop1): enabling ssd optimizations [ 136.664880][ T6208] BTRFS info (device loop1): auto enabling async discard [ 136.773613][ T5788] FAT-fs (loop3): error, invalid access to FAT (entry 0xffff0000) [ 136.782713][ T5788] FAT-fs (loop3): Filesystem has been set read-only [ 136.828926][ T5788] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 136.906573][ T5800] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 137.059297][ T6245] netlink: 20 bytes leftover after parsing attributes in process `syz.3.78'. [ 137.389010][ T5880] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 137.587729][ T5880] usb 4-1: Using ep0 maxpacket: 32 [ 137.603381][ T5880] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.640372][ T5880] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 137.660056][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.673485][ T5880] usb 4-1: Product: syz [ 137.677727][ T5880] usb 4-1: Manufacturer: syz [ 137.682563][ T5880] usb 4-1: SerialNumber: syz [ 137.714925][ T5880] usb 4-1: config 0 descriptor?? [ 137.735849][ T5880] usb 4-1: bad CDC descriptors [ 137.748320][ T5880] usb 4-1: unsupported MDLM descriptors [ 137.770810][ T6241] loop0: detected capacity change from 0 to 32768 [ 137.799379][ T6241] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 137.807612][ T6241] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 137.914263][ T6248] pim6reg1: entered promiscuous mode [ 137.930789][ T6252] loop1: detected capacity change from 0 to 32768 [ 137.942855][ T6248] pim6reg1: entered allmulticast mode [ 137.992615][ T6241] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 138.004327][ T6252] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 138.028137][ T5880] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 138.249205][ T5880] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 138.314155][ T6252] XFS (loop1): Ending clean mount [ 138.492298][ T6252] XFS (loop1): Quotacheck needed: Please wait. [ 139.023276][ T5880] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 774ms [ 139.031347][ T5880] gfs2: fsid=syz:syz.0: jid=0: Done [ 139.036634][ T6241] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 139.082274][ T6252] XFS (loop1): Quotacheck: Done. [ 139.153705][ T28] audit: type=1804 audit(1758232456.312:4): pid=6252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.80" name="/newroot/18/file0/file1" dev="loop1" ino=9286 res=1 errno=0 [ 139.346644][ T5800] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 140.038939][ T6272] loop2: detected capacity change from 0 to 512 [ 140.117828][ T5850] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 140.138371][ T6272] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 140.168981][ T5880] usb 4-1: USB disconnect, device number 4 [ 140.222202][ T6272] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 140.275922][ T6272] System zones: 1-12 [ 140.300999][ T6272] EXT4-fs (loop2): 1 truncate cleaned up [ 140.321603][ T6272] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.550018][ T5850] usb 2-1: Using ep0 maxpacket: 32 [ 140.559780][ T5850] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 140.559829][ T5850] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.559848][ T5850] usb 2-1: config 0 has no interface number 0 [ 140.559891][ T5850] usb 2-1: config 0 interface 8 altsetting 248 endpoint 0xD has invalid wMaxPacketSize 0 [ 140.559913][ T5850] usb 2-1: config 0 interface 8 altsetting 248 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 140.559939][ T5850] usb 2-1: config 0 interface 8 has no altsetting 0 [ 140.562047][ T5850] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 140.562075][ T5850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.562095][ T5850] usb 2-1: Product: syz [ 140.562110][ T5850] usb 2-1: Manufacturer: syz [ 140.562124][ T5850] usb 2-1: SerialNumber: syz [ 140.564553][ T5850] usb 2-1: config 0 descriptor?? [ 140.718849][ T6284] netlink: 240 bytes leftover after parsing attributes in process `syz.2.85'. [ 141.237972][ T5850] ath6kl: Failed to submit usb control message: -71 [ 141.271542][ T5850] ath6kl: unable to send the bmi data to the device: -71 [ 141.287334][ T5850] ath6kl: Unable to send get target info: -71 [ 141.310655][ T5850] ath6kl: Failed to init ath6kl core: -71 [ 141.330243][ T5850] ath6kl_usb: probe of 2-1:0.8 failed with error -71 [ 141.348703][ T5850] usb 2-1: USB disconnect, device number 5 [ 141.382539][ T5880] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 141.388209][ T5789] udevd[5789]: setting owner of /dev/bus/usb/002/005 to uid=0, gid=0 failed: No such file or directory [ 141.412093][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.757747][ T5880] usb 4-1: Using ep0 maxpacket: 16 [ 141.768980][ T5880] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.787727][ T5880] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 141.865521][ T6293] loop2: detected capacity change from 0 to 16 [ 141.880355][ T6293] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 141.993428][ T6288] overlayfs: failed to resolve './bus': -2 [ 142.233664][ T6295] Zero length message leads to an empty skb [ 142.269610][ T5880] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 142.283555][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.291710][ T5880] usb 4-1: Product: syz [ 142.296781][ T5880] usb 4-1: Manufacturer: syz [ 142.301928][ T5880] usb 4-1: SerialNumber: syz [ 142.401234][ T6297] process 'syz.1.90' launched '/dev/fd/9' with NULL argv: empty string added [ 142.471137][ T6299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.90'. [ 142.509748][ T6298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.90'. [ 142.638047][ T5880] usb 4-1: 0:2 : does not exist [ 142.664271][ T5880] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 142.701046][ T6291] loop0: detected capacity change from 0 to 32768 [ 142.733124][ T6291] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.88 (6291) [ 142.791633][ T5880] usb 4-1: USB disconnect, device number 5 [ 142.833461][ T6291] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 142.864370][ T6291] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 142.915610][ T6291] BTRFS info (device loop0): max_inline at 7 [ 142.954107][ T5789] udevd[5789]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.977898][ T6291] BTRFS info (device loop0): using free space tree [ 143.134423][ T6291] BTRFS info (device loop0): enabling ssd optimizations [ 143.164272][ T6328] loop1: detected capacity change from 0 to 512 [ 143.187895][ T6291] BTRFS info (device loop0): auto enabling async discard [ 143.227186][ T6328] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 143.271668][ T6328] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 143.303801][ T6328] System zones: 1-12 [ 143.329130][ T6328] EXT4-fs (loop1): 1 truncate cleaned up [ 143.336262][ T6328] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.356679][ T6336] loop3: detected capacity change from 0 to 512 [ 143.408019][ T6336] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 143.464181][ T6336] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 143.483426][ T6336] System zones: 1-12 [ 143.517199][ T6336] EXT4-fs (loop3): 1 truncate cleaned up [ 143.565331][ T6336] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.624401][ T5792] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 144.444502][ T6340] netlink: 24 bytes leftover after parsing attributes in process `syz.1.96'. [ 144.454203][ T6340] netlink: 212 bytes leftover after parsing attributes in process `syz.1.96'. [ 144.475264][ T5850] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 144.574982][ T6343] netlink: 24 bytes leftover after parsing attributes in process `syz.3.98'. [ 144.583952][ T6343] netlink: 212 bytes leftover after parsing attributes in process `syz.3.98'. [ 145.461892][ T5800] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.475385][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.531570][ T5850] usb 3-1: Using ep0 maxpacket: 32 [ 145.539970][ T5850] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 145.551179][ T5850] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.561628][ T5850] usb 3-1: config 0 has no interface number 0 [ 145.568848][ T5850] usb 3-1: config 0 interface 8 altsetting 248 endpoint 0xD has invalid wMaxPacketSize 0 [ 145.579585][ T5850] usb 3-1: config 0 interface 8 altsetting 248 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 145.592805][ T5850] usb 3-1: config 0 interface 8 has no altsetting 0 [ 145.611241][ T5850] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 145.628370][ T5850] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.642041][ T5850] usb 3-1: Product: syz [ 145.646306][ T5850] usb 3-1: Manufacturer: syz [ 145.655682][ T5850] usb 3-1: SerialNumber: syz [ 145.689898][ T5850] usb 3-1: config 0 descriptor?? [ 145.964146][ T5850] ath6kl: Failed to submit usb control message: -71 [ 145.974190][ T5850] ath6kl: unable to send the bmi data to the device: -71 [ 145.987821][ T5850] ath6kl: Unable to send get target info: -71 [ 146.849483][ T6359] loop0: detected capacity change from 0 to 128 [ 146.940941][ T6359] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 147.043865][ T6359] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 147.526920][ T5792] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 147.640788][ T6371] loop2: detected capacity change from 0 to 256 [ 147.676857][ T6371] exfat: Bad value for 'uid' [ 147.767645][ C1] sched: RT throttling activated [ 147.773854][ T5850] ath6kl: Failed to init ath6kl core: -71 [ 147.786360][ T5850] ath6kl_usb: probe of 3-1:0.8 failed with error -71 [ 147.799350][ T5850] usb 3-1: USB disconnect, device number 6 [ 148.210753][ T6376] loop1: detected capacity change from 0 to 512 [ 148.246446][ T6376] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 148.276397][ T6376] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 148.320422][ T6376] System zones: 1-12 [ 148.351124][ T6376] EXT4-fs (loop1): 1 truncate cleaned up [ 148.379679][ T6376] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.409385][ T6380] fuse: Bad value for 'fd' [ 148.432948][ T6369] loop3: detected capacity change from 0 to 32768 [ 149.652370][ T6380] loop2: detected capacity change from 0 to 131072 [ 149.663962][ T6383] netlink: 24 bytes leftover after parsing attributes in process `syz.1.109'. [ 149.673782][ T6383] netlink: 212 bytes leftover after parsing attributes in process `syz.1.109'. [ 149.752714][ T6380] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 149.761002][ T6380] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 149.930352][ T6380] F2FS-fs (loop2): invalid crc value [ 150.066925][ T6380] F2FS-fs (loop2): Found nat_bits in checkpoint [ 150.168008][ T6380] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 150.175882][ T6380] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 150.236121][ T6369] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 150.275856][ T5800] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.365265][ T6369] XFS (loop3): Ending clean mount [ 150.853841][ T6373] loop0: detected capacity change from 0 to 32768 [ 150.878733][ T6373] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.107 (6373) [ 150.940745][ T6373] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 150.954681][ T6373] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 150.969465][ T6373] BTRFS info (device loop0): max_inline at 7 [ 150.989936][ T6373] BTRFS info (device loop0): using free space tree [ 150.997033][ T6373] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 150.999491][ T6373] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 151.026398][ T6373] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 151.036609][ T6373] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 151.054470][ T6373] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 151.067283][ T6373] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 151.091776][ T6373] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 151.116784][ T6373] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 151.136579][ T6373] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 151.138391][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 151.162626][ T6373] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 151.166091][ T6373] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 151.176555][ T5788] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 151.240705][ T6373] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 151.277772][ T6373] BTRFS error (device loop0): open_ctree failed: -12 [ 151.417556][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 151.438483][ T9] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 151.446539][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.487677][ T9] usb 2-1: config 0 has no interface number 0 [ 151.493886][ T9] usb 2-1: config 0 interface 8 altsetting 248 endpoint 0xD has invalid wMaxPacketSize 0 [ 151.550727][ T9] usb 2-1: config 0 interface 8 altsetting 248 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 151.610623][ T9] usb 2-1: config 0 interface 8 has no altsetting 0 [ 151.661625][ T9] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 151.685166][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.685193][ T9] usb 2-1: Product: syz [ 151.685208][ T9] usb 2-1: Manufacturer: syz [ 151.685223][ T9] usb 2-1: SerialNumber: syz [ 151.696826][ T9] usb 2-1: config 0 descriptor?? [ 151.965358][ T9] ath6kl: Failed to submit usb control message: -71 [ 151.987703][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 151.994805][ T9] ath6kl: Unable to send get target info: -71 [ 152.083393][ T9] ath6kl: Failed to init ath6kl core: -71 [ 152.130744][ T9] ath6kl_usb: probe of 2-1:0.8 failed with error -71 [ 152.164505][ T9] usb 2-1: USB disconnect, device number 6 [ 152.541259][ T6416] loop0: detected capacity change from 0 to 32768 [ 152.593745][ T6432] loop1: detected capacity change from 0 to 512 [ 152.619161][ T5789] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 152.632582][ T6432] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 152.664415][ T6432] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 152.677936][ T6432] System zones: 1-12 [ 152.690502][ T6432] EXT4-fs (loop1): 1 truncate cleaned up [ 152.697560][ T6432] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.982748][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 153.148143][ T6436] netlink: 240 bytes leftover after parsing attributes in process `syz.1.118'. [ 153.217922][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 153.271145][ T9] usb 4-1: no configurations [ 153.323665][ T9] usb 4-1: can't read configurations, error -22 [ 153.927979][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 153.949006][ T5800] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.997862][ T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 154.013418][ T6438] sd 0:0:1:0: PR command failed: 1026 [ 154.020443][ T6438] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 154.027915][ T6438] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 154.141168][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 154.149560][ T9] usb 4-1: no configurations [ 154.167758][ T9] usb 4-1: can't read configurations, error -22 [ 154.175571][ T9] usb usb4-port1: attempt power cycle [ 154.207729][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 154.226631][ T23] usb 1-1: config 0 has no interfaces? [ 154.232753][ T23] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 154.248439][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.271841][ T23] usb 1-1: config 0 descriptor?? [ 154.492162][ T5990] usb 1-1: USB disconnect, device number 3 [ 154.588112][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 154.629478][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 154.646639][ T9] usb 4-1: no configurations [ 154.654244][ T9] usb 4-1: can't read configurations, error -22 [ 154.700032][ T6449] loop1: detected capacity change from 0 to 32768 [ 154.708605][ T6449] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.122 (6449) [ 154.729136][ T6449] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 154.749411][ T6449] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 154.769377][ T6449] BTRFS info (device loop1): max_inline at 7 [ 154.785843][ T6449] BTRFS info (device loop1): using free space tree [ 154.819950][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 154.865799][ T6464] loop2: detected capacity change from 0 to 256 [ 154.878564][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 154.889647][ T9] usb 4-1: no configurations [ 154.905505][ T9] usb 4-1: can't read configurations, error -22 [ 154.928243][ T9] usb usb4-port1: unable to enumerate USB device [ 154.942424][ T6464] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x10e00a98, utbl_chksum : 0xe619d30d) [ 154.963110][ T6449] BTRFS info (device loop1): enabling ssd optimizations [ 154.996970][ T6449] BTRFS info (device loop1): auto enabling async discard [ 155.233589][ T5800] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 155.450400][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 155.656712][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 155.669256][ T9] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 155.690991][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.727741][ T9] usb 1-1: config 0 has no interface number 0 [ 155.737739][ T9] usb 1-1: config 0 interface 8 altsetting 248 endpoint 0xD has invalid wMaxPacketSize 0 [ 155.766949][ T9] usb 1-1: config 0 interface 8 altsetting 248 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 155.780930][ T6485] vlan2: entered promiscuous mode [ 155.786022][ T6485] bridge0: entered promiscuous mode [ 155.800783][ T9] usb 1-1: config 0 interface 8 has no altsetting 0 [ 155.811017][ T5796] syz-executor (5796) used greatest stack depth: 20840 bytes left [ 155.830386][ T9] usb 1-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 155.840219][ T6486] xt_hashlimit: size too large, truncated to 1048576 [ 155.847161][ T6486] xt_hashlimit: max too large, truncated to 1048576 [ 155.858084][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.876715][ T9] usb 1-1: Product: syz [ 155.886059][ T9] usb 1-1: Manufacturer: syz [ 155.911223][ T9] usb 1-1: SerialNumber: syz [ 155.948288][ T9] usb 1-1: config 0 descriptor?? [ 156.103157][ T3416] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.196539][ T9] ath6kl: Failed to submit usb control message: -71 [ 156.224654][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 156.237874][ T9] ath6kl: Unable to send get target info: -71 [ 156.257534][ T9] ath6kl: Failed to init ath6kl core: -71 [ 156.264762][ T9] ath6kl_usb: probe of 1-1:0.8 failed with error -71 [ 156.309391][ T9] usb 1-1: USB disconnect, device number 4 [ 156.334771][ T6483] loop1: detected capacity change from 0 to 32768 [ 156.351963][ T6483] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.127 (6483) [ 156.379897][ T6483] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 156.386535][ T3416] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.404568][ T6483] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 156.414912][ T6483] BTRFS info (device loop1): using free space tree [ 156.495672][ T3416] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.549370][ T6483] BTRFS info (device loop1): enabling ssd optimizations [ 156.556387][ T6483] BTRFS info (device loop1): auto enabling async discard [ 156.700364][ T3416] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.106324][ T6513] netlink: 12 bytes leftover after parsing attributes in process `syz.0.134'. [ 159.506597][ T5793] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 159.518164][ T5793] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 159.529050][ T5793] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 159.561814][ T5793] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 159.569863][ T5800] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 159.595393][ T5793] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 159.607785][ T5793] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 160.780667][ T6517] loop0: detected capacity change from 0 to 32768 [ 160.826844][ T6517] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.135 (6517) [ 160.888790][ T6517] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 160.938627][ T6517] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 160.970262][ T6517] BTRFS info (device loop0): max_inline at 7 [ 160.976323][ T6517] BTRFS info (device loop0): using free space tree [ 161.255347][ T6563] netlink: 12 bytes leftover after parsing attributes in process `syz.1.137'. [ 161.287800][ T6517] BTRFS info (device loop0): enabling ssd optimizations [ 161.294908][ T6517] BTRFS info (device loop0): auto enabling async discard [ 161.306913][ T6563] netlink: 16 bytes leftover after parsing attributes in process `syz.1.137'. [ 161.573179][ T5792] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 161.658110][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 161.719721][ T5793] Bluetooth: hci2: command tx timeout [ 161.839594][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 161.853232][ T6543] loop3: detected capacity change from 0 to 32768 [ 161.861182][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 161.880418][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 161.917445][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 161.933988][ T5789] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop0 scanned by udevd (5789) [ 161.963715][ T9] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 161.984954][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.007410][ T9] usb 2-1: Product: syz [ 162.014098][ T9] usb 2-1: Manufacturer: syz [ 162.025534][ T9] usb 2-1: SerialNumber: syz [ 162.064425][ T9] usb 2-1: config 0 descriptor?? [ 162.088126][ T9] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 162.234204][ T6573] overlayfs: failed to get index nlink (file0/file1, err=-61) [ 162.247869][ T1186] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 162.423046][ T6563] loop1: detected capacity change from 0 to 64 [ 162.477836][ T1186] usb 4-1: Using ep0 maxpacket: 16 [ 162.488370][ T1186] usb 4-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=9c.25 [ 162.499185][ T6563] hfs: unable to parse mount options [ 162.499806][ T1186] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.514275][ T1186] usb 4-1: Product: syz [ 162.518827][ T1186] usb 4-1: Manufacturer: syz [ 162.523556][ T1186] usb 4-1: SerialNumber: syz [ 162.536442][ T1186] usb 4-1: config 0 descriptor?? [ 162.550382][ T6563] syz.1.137 (6563): drop_caches: 0 [ 162.612959][ T9] scsi host1: usb-storage 2-1:0.0 [ 162.638246][ T9] usb 2-1: USB disconnect, device number 7 [ 162.727934][ T5880] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 162.751185][ T1186] usb 4-1: Found UVC 0.00 device syz (045e:0721) [ 162.767024][ T1186] usb 4-1: No valid video chain found. [ 162.792103][ T1186] usb 4-1: USB disconnect, device number 10 [ 162.911644][ T6518] chnl_net:caif_netlink_parms(): no params data found [ 162.967751][ T5880] usb 1-1: Using ep0 maxpacket: 8 [ 162.975138][ T5880] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 162.996947][ T5880] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 163.028717][ T5880] usb 1-1: New USB device found, idVendor=056a, idProduct=00e6, bcdDevice= 0.00 [ 163.052186][ T5880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.108500][ T5880] usb 1-1: config 0 descriptor?? [ 163.268809][ T3416] hsr_slave_0: left promiscuous mode [ 163.278361][ T3416] hsr_slave_1: left promiscuous mode [ 163.291261][ T3416] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.305367][ T3416] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.349685][ T3416] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.357161][ T3416] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.386948][ T3416] bridge_slave_1: left allmulticast mode [ 163.400866][ T3416] bridge_slave_1: left promiscuous mode [ 163.408725][ T3416] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.426735][ T3416] bridge_slave_0: left allmulticast mode [ 163.437679][ T3416] bridge_slave_0: left promiscuous mode [ 163.443775][ T3416] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.554156][ T5880] wacom 0003:056A:00E6.0001: unknown main item tag 0x0 [ 163.567100][ T3416] veth1_macvtap: left promiscuous mode [ 163.575715][ T5880] wacom 0003:056A:00E6.0001: unknown main item tag 0x0 [ 163.583539][ T3416] veth0_macvtap: left promiscuous mode [ 163.589276][ T5880] wacom 0003:056A:00E6.0001: unknown main item tag 0x0 [ 163.616762][ T6594] loop1: detected capacity change from 0 to 128 [ 163.655994][ T6594] UBIFS error (pid: 6594): cannot open "/dev/loop1", error -22 [ 163.669823][ T5880] wacom 0003:056A:00E6.0001: hidraw0: USB HID v0.00 Device [HID 056a:00e6] on usb-dummy_hcd.0-1/input0 [ 163.788205][ T5793] Bluetooth: hci2: command tx timeout [ 163.804763][ T5880] usb 1-1: USB disconnect, device number 5 [ 163.916023][ T6607] loop1: detected capacity change from 0 to 2048 [ 164.025628][ T6609] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 164.119292][ T6605] fido_id[6605]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 165.032333][ T3416] team0 (unregistering): Port device team_slave_1 removed [ 165.090301][ T6619] loop0: detected capacity change from 0 to 32768 [ 165.132874][ T6619] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.143 (6619) [ 165.167472][ T6612] loop3: detected capacity change from 0 to 32768 [ 165.193327][ T3416] team0 (unregistering): Port device team_slave_0 removed [ 165.223951][ T6612] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 165.245149][ T6619] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 165.255580][ T6619] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 165.266016][ T6619] BTRFS info (device loop0): using free space tree [ 165.273116][ T6612] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 165.345846][ T3416] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.366168][ T6612] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 165.395871][ T23] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 165.408078][ T23] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 165.475527][ T6619] BTRFS info (device loop0): enabling ssd optimizations [ 165.482859][ T6619] BTRFS info (device loop0): auto enabling async discard [ 165.487110][ T3416] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.525447][ T23] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 117ms [ 165.554819][ T23] gfs2: fsid=syz:syz.0: jid=0: Done [ 165.568626][ T6612] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 165.937093][ T5793] Bluetooth: hci2: command tx timeout [ 166.547457][ T5792] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 166.964229][ T6612] netlink: 'syz.3.141': attribute type 2 has an invalid length. [ 167.475476][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 167.510889][ T6646] loop0: detected capacity change from 0 to 32768 [ 167.524165][ T6646] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.145 (6646) [ 167.557114][ T6646] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 167.568730][ T6646] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 167.583984][ T6646] BTRFS info (device loop0): max_inline at 7 [ 167.594213][ T6646] BTRFS info (device loop0): using free space tree [ 167.613640][ T3416] bond0 (unregistering): Released all slaves [ 167.677701][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 167.693330][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.715127][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.725132][ T6646] BTRFS info (device loop0): enabling ssd optimizations [ 167.725156][ T6646] BTRFS info (device loop0): auto enabling async discard [ 167.739622][ T9] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 167.748806][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.770182][ T9] usb 4-1: config 0 descriptor?? [ 167.844296][ T5792] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 167.959209][ T5793] Bluetooth: hci2: command tx timeout [ 168.260933][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 168.266994][ T9] usbhid: probe of 4-1:0.0 failed with error -71 [ 168.322207][ T9] usb 4-1: USB disconnect, device number 11 [ 168.340251][ T6518] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.348175][ T6518] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.365702][ T6518] bridge_slave_0: entered allmulticast mode [ 168.388875][ T6518] bridge_slave_0: entered promiscuous mode [ 168.416849][ T6518] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.458264][ T6518] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.471622][ T6518] bridge_slave_1: entered allmulticast mode [ 168.509408][ T6518] bridge_slave_1: entered promiscuous mode [ 168.633841][ T6518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.672531][ T6518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.823934][ T6666] Bluetooth: MGMT ver 1.22 [ 168.841561][ T6666] 9pnet_fd: Insufficient options for proto=fd [ 168.842340][ T6518] team0: Port device team_slave_0 added [ 168.852234][ T6666] overlayfs: missing 'lowerdir' [ 168.888929][ T6518] team0: Port device team_slave_1 added [ 169.079063][ T6518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.086077][ T6518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.204429][ T6518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.228665][ T6518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.253960][ T6518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.557198][ T6664] loop0: detected capacity change from 0 to 40427 [ 169.580363][ T6518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.840305][ T6664] F2FS-fs (loop0): invalid crc value [ 170.113402][ T6664] F2FS-fs (loop0): Found nat_bits in checkpoint [ 170.313805][ T6518] hsr_slave_0: entered promiscuous mode [ 170.325180][ T6518] hsr_slave_1: entered promiscuous mode [ 170.355118][ T6664] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 170.422768][ T6679] loop1: detected capacity change from 0 to 1024 [ 170.485160][ T6688] loop3: detected capacity change from 0 to 1024 [ 170.526765][ T6679] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.580826][ T6679] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.639513][ T6679] netlink: 12 bytes leftover after parsing attributes in process `syz.1.150'. [ 170.861838][ T5800] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.982230][ T6518] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 170.997740][ T5880] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 171.002727][ T6518] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 171.043870][ T6518] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 171.072812][ T6518] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 171.221860][ T5880] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.237772][ T5880] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.262967][ T5880] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 171.286211][ T5880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.298563][ T6518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.321176][ T5880] usb 1-1: config 0 descriptor?? [ 171.402239][ T6518] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.426186][ T3416] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.433400][ T3416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.514953][ T3427] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.522148][ T3427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.623273][ T6692] syz.0.146: attempt to access beyond end of device [ 171.623273][ T6692] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 171.672410][ T6692] syz.0.146: attempt to access beyond end of device [ 171.672410][ T6692] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 171.731299][ T6664] syz.0.146: attempt to access beyond end of device [ 171.731299][ T6664] loop0: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 171.850203][ T5880] usbhid 1-1:0.0: can't add hid device: -71 [ 171.868654][ T5880] usbhid: probe of 1-1:0.0 failed with error -71 [ 171.930260][ T5880] usb 1-1: USB disconnect, device number 6 [ 171.973176][ T6700] loop1: detected capacity change from 0 to 32768 [ 172.016404][ T6700] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.151 (6700) [ 172.085282][ T6700] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 172.114362][ T6700] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 172.143853][ T6700] BTRFS info (device loop1): using free space tree [ 172.251417][ T6700] BTRFS info (device loop1): enabling ssd optimizations [ 172.266764][ T6700] BTRFS info (device loop1): auto enabling async discard [ 172.273038][ T6518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.999609][ T5792] syz-executor: attempt to access beyond end of device [ 172.999609][ T5792] loop0: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 173.079001][ T5792] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 173.236150][ T5800] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 174.013866][ T6759] sd 0:0:1:0: PR command failed: 1026 [ 174.021709][ T6759] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 174.034725][ T6759] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 174.206608][ T6518] veth0_vlan: entered promiscuous mode [ 174.265624][ T6518] veth1_vlan: entered promiscuous mode [ 174.387295][ T6518] veth0_macvtap: entered promiscuous mode [ 174.428791][ T6518] veth1_macvtap: entered promiscuous mode [ 174.507245][ T6518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.521868][ T6518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.534649][ T6518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.545393][ T6518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.556449][ T6518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.573911][ T6518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.594914][ T6518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.660921][ T6518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.707765][ T6518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.743063][ T6518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.774361][ T6518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.795659][ T6772] loop0: detected capacity change from 0 to 512 [ 174.809410][ T6518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.862605][ T6772] FAT-fs (loop0): Unrecognized mount option "dotsM2zs [ 174.862605][ T6772] GoyzΒ3wA" or missing value [ 174.892500][ T6518] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.927790][ T6518] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.936577][ T6518] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.999899][ T6518] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.266574][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.304478][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.360624][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.397028][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.452668][ T6787] loop0: detected capacity change from 0 to 128 [ 175.525968][ T6787] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 175.559845][ T6787] ext4 filesystem being mounted at /33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 175.591680][ C1] vkms_vblank_simulate: vblank timer overrun [ 175.863897][ T6778] loop1: detected capacity change from 0 to 40427 [ 175.879326][ T6787] gre1: entered allmulticast mode [ 175.980790][ T6778] F2FS-fs (loop1): invalid crc value [ 176.011043][ T6778] F2FS-fs (loop1): Found nat_bits in checkpoint [ 176.135177][ T5792] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 176.253251][ T6778] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 176.365541][ T28] audit: type=1800 audit(1758232493.522:5): pid=6778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.159" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 176.420526][ T6778] syz.1.159: attempt to access beyond end of device [ 176.420526][ T6778] loop1: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 176.487525][ T6778] syz.1.159: attempt to access beyond end of device [ 176.487525][ T6778] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 176.580214][ T6780] loop3: detected capacity change from 0 to 32768 [ 176.654749][ T6780] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 176.670018][ T6780] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 176.825500][ T6780] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 176.843936][ T1186] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 176.853624][ T1186] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 177.012994][ T1186] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 159ms [ 177.053866][ T5800] syz-executor: attempt to access beyond end of device [ 177.053866][ T5800] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 177.053950][ T1186] gfs2: fsid=syz:syz.0: jid=0: Done [ 177.095170][ T6794] loop4: detected capacity change from 0 to 32768 [ 177.115173][ T6794] (syz.4.131,6794,1):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "commitH0000900000004" or missing value [ 177.115563][ T6780] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 177.178212][ T5800] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 177.185308][ T6794] (syz.4.131,6794,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 177.587969][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 177.658152][ T6803] loop0: detected capacity change from 0 to 32768 [ 177.694466][ T6803] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.162 (6803) [ 177.774238][ T6803] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 177.815168][ T6803] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 177.828438][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 177.841054][ T23] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.862078][ T6803] BTRFS info (device loop0): using free space tree [ 177.882851][ T23] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 177.913654][ T23] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 177.977294][ T23] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 177.991584][ T23] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 178.058242][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.067390][ T6803] BTRFS info (device loop0): enabling ssd optimizations [ 178.106336][ T6803] BTRFS info (device loop0): auto enabling async discard [ 178.144076][ T23] hub 5-1:1.0: bad descriptor, ignoring hub [ 178.167790][ T23] hub: probe of 5-1:1.0 failed with error -5 [ 178.194833][ T23] cdc_wdm 5-1:1.0: skipping garbage [ 178.214529][ T23] cdc_wdm 5-1:1.0: skipping garbage [ 178.425052][ T23] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 178.445722][ T23] cdc_wdm 5-1:1.0: Unknown control protocol [ 178.848829][ T23] usb 5-1: USB disconnect, device number 2 [ 179.112083][ T6843] loop1: detected capacity change from 0 to 512 [ 179.178198][ T5792] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 179.234911][ T6843] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 179.396579][ T5803] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 179.567746][ T5850] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 179.807782][ T5850] usb 5-1: Using ep0 maxpacket: 32 [ 179.820422][ T23] kernel read not supported for file /file0 (pid: 23 comm: kworker/1:0) [ 179.840605][ T5850] usb 5-1: config 1 has an invalid descriptor of length 200, skipping remainder of the config [ 179.848757][ T6861] loop1: detected capacity change from 0 to 256 [ 179.861565][ T5850] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 179.927390][ T5850] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 179.957553][ T5850] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.959729][ T6861] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 179.984756][ T5850] usb 5-1: Product: ї [ 179.998246][ T5850] usb 5-1: Manufacturer: 䑄 [ 180.002916][ T5850] usb 5-1: SerialNumber: 㪅뀪ꥄ࢚簢ﭐ뼬ẞ྿Ễ즟⣫ꪏ皴ૢ蕤［鍦⋚㐝험堄戯䱐塾㐷듅㮕ℷ優䎬ﳉ㨋ᐺ犍ⶒ෍廬㱋囟嘦ই敲ᵿ࠻⚁日鵛얧椚몸盦⎼岎뾝拠ᚯ㚲쭈协⁷ꛅඁ皅꺿椭ꟙ葜쮅䝩翰궦ᶟᕍ켈ᙱ짰䌀붝Ұ鄑㸸䲵迬垎䧪ḭ耱 [ 180.179317][ T6863] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 180.239581][ T6863] netlink: 'syz.3.166': attribute type 3 has an invalid length. [ 180.247357][ T6863] netlink: 666 bytes leftover after parsing attributes in process `syz.3.166'. [ 180.272871][ T6868] overlayfs: missing 'lowerdir' [ 180.687963][ T6877] loop0: detected capacity change from 0 to 4096 [ 180.695755][ T6877] ntfs: (device loop0): parse_options(): Unrecognized mount option I. [ 180.877856][ T6877] netlink: 12 bytes leftover after parsing attributes in process `syz.0.170'. [ 181.792226][ T6903] loop3: detected capacity change from 0 to 1024 [ 181.813834][ T6903] EXT4-fs: Ignoring removed nobh option [ 181.848559][ T6903] EXT4-fs: inline encryption not supported [ 181.873670][ T6903] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 181.959442][ T6903] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.283420][ T6896] loop0: detected capacity change from 0 to 32768 [ 182.286875][ T5850] usb 5-1: cannot find UAC_HEADER [ 182.313003][ T6896] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.173 (6896) [ 182.377137][ T6896] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 182.407433][ T5850] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 182.414656][ T6896] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 182.449377][ T6896] BTRFS info (device loop0): using free space tree [ 182.473559][ T5850] usb 5-1: USB disconnect, device number 3 [ 182.512537][ T6919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.177'. [ 182.552520][ T5803] udevd[5803]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 182.640650][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.674447][ T6896] BTRFS info (device loop0): enabling ssd optimizations [ 182.679953][ T6919] syz.4.177 uses obsolete (PF_INET,SOCK_PACKET) [ 182.687715][ T6896] BTRFS info (device loop0): auto enabling async discard [ 182.965670][ T6894] loop1: detected capacity change from 0 to 32768 [ 183.000326][ T6894] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 183.057842][ T6894] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 183.265279][ T6894] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 183.278023][ T5837] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 183.287300][ T5837] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 183.616797][ T5837] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 329ms [ 183.677789][ T5837] gfs2: fsid=syz:syz.0: jid=0: Done [ 183.683131][ T6894] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 183.737458][ T5792] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 184.217530][ T5789] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop0 scanned by udevd (5789) [ 184.243365][ T5880] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 184.645880][ T5880] usb 4-1: Using ep0 maxpacket: 32 [ 184.654526][ T5880] usb 4-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30 [ 184.719797][ T5880] usb 4-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.730913][ T5880] usb 4-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 185.108100][ T5880] usb 4-1: config 0 interface 0 has no altsetting 0 [ 185.115118][ T5880] usb 4-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 185.128367][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.148959][ T5880] usb 4-1: config 0 descriptor?? [ 185.381803][ T6972] loop0: detected capacity change from 0 to 512 [ 185.419530][ T6972] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 185.437010][ T6972] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 185.458082][ T6972] System zones: 1-12 [ 185.469090][ T6974] loop4: detected capacity change from 0 to 512 [ 185.488005][ T6972] EXT4-fs (loop0): 1 truncate cleaned up [ 185.495048][ T6972] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.581532][ T6974] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 185.629796][ T5793] Bluetooth: hci2: command tx timeout [ 185.668037][ T6974] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 185.678566][ T6978] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 185.685568][ T6978] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 185.703653][ T6974] System zones: 1-12 [ 185.717025][ T6974] EXT4-fs (loop4): 1 truncate cleaned up [ 185.742401][ T6974] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.761730][ T6978] vhci_hcd vhci_hcd.0: Device attached [ 185.771777][ T6982] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(10) [ 185.778523][ T6982] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 185.778580][ T5880] zeroplus 0003:0C12:0030.0002: item fetching failed at offset 5/7 [ 185.795751][ T5880] zeroplus 0003:0C12:0030.0002: parse failed [ 185.801891][ T5880] zeroplus: probe of 0003:0C12:0030.0002 failed with error -22 [ 185.814176][ T6982] vhci_hcd vhci_hcd.0: Device attached [ 185.825811][ T6978] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(9) [ 185.832462][ T6978] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 185.849372][ T6978] vhci_hcd vhci_hcd.0: Device attached [ 185.857121][ T6978] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 186.054797][ T6988] netlink: 24 bytes leftover after parsing attributes in process `syz.0.187'. [ 187.138450][ T6990] netlink: 24 bytes leftover after parsing attributes in process `syz.4.188'. [ 187.147995][ T6990] netlink: 212 bytes leftover after parsing attributes in process `syz.4.188'. [ 187.479670][ T6978] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 187.625304][ T6986] vhci_hcd: connection closed [ 187.647334][ T12] vhci_hcd: stop threads [ 187.656619][ T6979] vhci_hcd: connection closed [ 187.668258][ T6983] vhci_hcd: connection closed [ 187.716972][ T12] vhci_hcd: release socket [ 187.727425][ T12] vhci_hcd: disconnect device [ 187.732609][ T12] vhci_hcd: stop threads [ 187.736892][ T12] vhci_hcd: release socket [ 187.742776][ T12] vhci_hcd: disconnect device [ 187.747841][ T12] vhci_hcd: stop threads [ 187.752117][ T12] vhci_hcd: release socket [ 187.757738][ T12] vhci_hcd: disconnect device [ 187.787282][ T23] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 187.829183][ T23] usb 35-1: enqueue for inactive port 0 [ 187.872385][ T5792] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.886789][ T6518] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.930221][ T23] vhci_hcd: vhci_device speed not set [ 187.944084][ T5880] usb 4-1: USB disconnect, device number 12 [ 188.059925][ T7001] netlink: 20 bytes leftover after parsing attributes in process `syz.3.189'. [ 188.389878][ T5850] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 188.437702][ T5880] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 188.687990][ T5850] usb 5-1: Using ep0 maxpacket: 32 [ 188.716026][ T5850] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 188.726086][ T5850] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.766865][ T5850] usb 5-1: config 0 has no interface number 0 [ 188.777707][ T5880] usb 4-1: Using ep0 maxpacket: 32 [ 188.787163][ T5850] usb 5-1: config 0 interface 8 altsetting 248 endpoint 0xD has invalid wMaxPacketSize 0 [ 188.799614][ T5880] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.830416][ T5850] usb 5-1: config 0 interface 8 altsetting 248 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 188.844051][ T5850] usb 5-1: config 0 interface 8 has no altsetting 0 [ 188.852445][ T5880] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 188.854983][ T5850] usb 5-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 188.918023][ T5850] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.931601][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.939838][ T5880] usb 4-1: Product: syz [ 188.944105][ T5880] usb 4-1: Manufacturer: syz [ 188.944164][ T5850] usb 5-1: Product: syz [ 188.948839][ T5880] usb 4-1: SerialNumber: syz [ 188.951925][ T5880] usb 4-1: config 0 descriptor?? [ 188.967345][ T5880] usb 4-1: bad CDC descriptors [ 188.972941][ T5880] usb 4-1: unsupported MDLM descriptors [ 188.974660][ T5850] usb 5-1: Manufacturer: syz [ 189.065306][ T5850] usb 5-1: SerialNumber: syz [ 189.244815][ T5850] usb 5-1: config 0 descriptor?? [ 189.808524][ T9] usb 4-1: USB disconnect, device number 13 [ 189.859240][ T5850] ath6kl: Failed to submit usb control message: -71 [ 189.865939][ T5850] ath6kl: unable to send the bmi data to the device: -71 [ 189.882130][ T5850] ath6kl: Unable to send get target info: -71 [ 189.918690][ T5850] ath6kl: Failed to init ath6kl core: -71 [ 189.925805][ T5850] ath6kl_usb: probe of 5-1:0.8 failed with error -71 [ 189.981859][ T5850] usb 5-1: USB disconnect, device number 4 [ 190.175392][ T7011] loop1: detected capacity change from 0 to 32768 [ 190.194082][ T7011] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 190.634388][ T5789] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 191.486432][ T7031] loop4: detected capacity change from 0 to 8192 [ 191.759362][ T7031] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 191.798550][ T7031] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 191.878384][ T7031] REISERFS (device loop4): using ordered data mode [ 191.955893][ T7031] reiserfs: using flush barriers [ 192.060279][ T7031] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 192.127953][ T7031] REISERFS (device loop4): checking transaction log (loop4) [ 192.545637][ T7031] REISERFS (device loop4): Using tea hash to sort names [ 192.590927][ T7020] loop0: detected capacity change from 0 to 32768 [ 192.601490][ T7031] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 192.698378][ T7020] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 192.778466][ T7020] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 192.899456][ T7053] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 192.938491][ T7020] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 192.994515][ T5990] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 193.034175][ T5990] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 193.188409][ T5990] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 154ms [ 193.221584][ T5990] gfs2: fsid=syz:syz.0: jid=0: Done [ 193.237670][ T7020] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 193.241181][ T28] audit: type=1800 audit(1758232510.402:6): pid=7053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.199" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 193.285362][ T7020] gfs2: fsid=syz:syz.0: can't create logd thread: -4 [ 193.302338][ T7053] ksmbd: Unknown IPC event: 6, ignore. [ 193.797713][ T5990] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 194.040530][ T5990] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.072230][ T5990] usb 2-1: config 0 has no interfaces? [ 194.100705][ T5990] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 194.127928][ T5990] usb 2-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 194.163419][ T5990] usb 2-1: Product: syz [ 194.182153][ T5990] usb 2-1: Manufacturer: syz [ 194.186826][ T5990] usb 2-1: SerialNumber: syz [ 194.234983][ T5990] usb 2-1: config 0 descriptor?? [ 194.251093][ T7077] sctp: [Deprecated]: syz.0.207 (pid 7077) Use of struct sctp_assoc_value in delayed_ack socket option. [ 194.251093][ T7077] Use struct sctp_sack_info instead [ 194.729241][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.735600][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.874130][ T7083] random: crng reseeded on system resumption [ 195.537318][ T7092] gtp0: entered promiscuous mode [ 195.545898][ T7092] gtp0: entered allmulticast mode [ 196.630079][ T1186] usb 2-1: USB disconnect, device number 8 [ 196.762075][ T7117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.216'. [ 197.154139][ T7134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.219'. [ 199.712071][ T7173] netlink: 'syz.3.230': attribute type 1 has an invalid length. [ 199.917746][ T1186] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 199.961418][ T7179] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 199.995186][ T7180] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 200.015499][ T7180] bond1 (unregistering): Released all slaves [ 200.121133][ T1186] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.177755][ T1186] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.188353][ T1186] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 200.197448][ T1186] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.246689][ T1186] usb 1-1: config 0 descriptor?? [ 200.435203][ T7195] loop4: detected capacity change from 0 to 1024 [ 200.466526][ T7195] EXT4-fs (loop4): Cannot use DAX on a filesystem that may contain inline data [ 200.699894][ T1186] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 200.754180][ T1186] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 202.069787][ T1186] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 202.081778][ T1186] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 202.088902][ T1186] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 202.095979][ T1186] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 202.104017][ T1186] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 202.114148][ T1186] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 202.787785][ T1186] cp2112 0003:10C4:EA90.0003: Part Number: 0x00 Device Version: 0x00 [ 203.216784][ T7170] cp2112 0003:10C4:EA90.0003: Error starting transaction: -38 [ 203.232865][ T1186] cp2112 0003:10C4:EA90.0003: error reading lock byte: -32 [ 203.578734][ T5850] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 204.061014][ T5850] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.137186][ T5850] usb 5-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 204.194496][ T5850] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.482732][ T5850] usb 5-1: config 0 descriptor?? [ 205.295472][ T5850] wacom 0003:056A:033B.0004: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 205.308880][ T7241] tipc: Enabling of bearer rejected, failed to enable media [ 205.365227][ T5850] wacom 0003:056A:033B.0004: hidraw1: USB HID v0.00 Device [HID 056a:033b] on usb-dummy_hcd.4-1/input0 [ 205.424211][ T5850] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:033B.0004/input/input8 [ 205.764338][ T5880] usb 1-1: USB disconnect, device number 7 [ 206.070669][ T5850] usb 5-1: USB disconnect, device number 5 [ 206.527926][ T7275] netlink: 24 bytes leftover after parsing attributes in process `syz.4.252'. [ 207.098664][ T5793] Bluetooth: hci0: command 0x0406 tx timeout [ 207.104914][ T5793] Bluetooth: hci1: command 0x0406 tx timeout [ 207.109509][ T5105] Bluetooth: hci3: command 0x0406 tx timeout [ 208.287792][ T23] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 208.503829][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 208.564241][ T23] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 208.583910][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.597719][ T23] usb 1-1: Product: syz [ 208.601960][ T23] usb 1-1: Manufacturer: syz [ 209.697761][ T23] usb 1-1: SerialNumber: syz [ 210.003316][ T23] usb 1-1: config 0 descriptor?? [ 212.306551][ T7333] loop3: detected capacity change from 0 to 64 [ 213.819609][ T23] usb 1-1: USB disconnect, device number 8 [ 214.588916][ T7352] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 219.205702][ T7409] loop0: detected capacity change from 0 to 512 [ 219.263363][ T7409] ext4: Unknown parameter 'seclabel' [ 221.494446][ T7435] netlink: 20 bytes leftover after parsing attributes in process `syz.4.294'. [ 222.143273][ T7442] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 222.735385][ T5850] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 222.816485][ T5850] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 222.885923][ T5850] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 222.926736][ T5850] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 222.934546][ T5850] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 222.943934][ T5850] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 222.951967][ T5850] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 222.959995][ T5850] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 222.967746][ T5850] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 222.975486][ T5850] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 222.983182][ T5850] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 222.993349][ T5850] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 223.001401][ T5850] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 223.010746][ T5850] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 223.018840][ T5850] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 223.026737][ T5850] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 223.071243][ T5850] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 223.101339][ T5850] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 223.152554][ T5850] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 223.174404][ T5850] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 223.207903][ T5850] hid-generic 0000:0000:0000.0005: unknown main item tag 0x2 [ 223.216504][ T5850] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 223.276559][ T28] audit: type=1107 audit(1758232540.432:7): pid=7455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 224.124100][ T5850] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 224.157057][ T5850] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 224.188020][ T5850] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 224.215347][ T5850] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 224.231158][ T5850] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 224.241330][ T5850] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 224.251429][ T5850] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 224.261475][ T5850] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 224.271445][ T5850] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 224.281492][ T5850] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 224.291500][ T5850] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 224.301721][ T5850] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 224.313665][ T5850] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 224.332488][ T5850] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 224.341426][ T5850] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 224.352667][ T5850] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 224.361685][ T5850] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 224.372903][ T5850] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 224.381927][ T5850] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 224.471061][ T5850] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 224.839049][ T7474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.306'. [ 225.012724][ T7469] fido_id[7469]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 225.045664][ T7474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.306'. [ 225.545429][ T7477] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 225.877722][ T1186] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 226.087811][ T1186] usb 5-1: Using ep0 maxpacket: 16 [ 226.117294][ T1186] usb 5-1: unable to get BOS descriptor or descriptor too short [ 226.579006][ T5850] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 226.874409][ T5850] usb 1-1: Using ep0 maxpacket: 16 [ 226.943501][ T5850] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 227.027231][ T1186] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 227.044934][ T1186] usb 5-1: can't read configurations, error -71 [ 227.079163][ T5850] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 227.100969][ T5850] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.135434][ T5850] usb 1-1: Product: syz [ 227.152765][ T5850] usb 1-1: Manufacturer: syz [ 227.171949][ T5850] usb 1-1: SerialNumber: syz [ 227.194270][ T5850] usb 1-1: config 0 descriptor?? [ 227.220540][ T5850] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 227.247783][ T5850] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 227.259609][ T7507] loop1: detected capacity change from 0 to 512 [ 227.418498][ T7507] EXT4-fs (loop1): Test dummy encryption mode enabled [ 227.425320][ T7507] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 227.441398][ T7507] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.319: bad orphan inode 131083 [ 227.453621][ T7507] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.469215][ T23] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 227.745817][ T1186] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 227.749870][ T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.766809][ T23] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 227.776124][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.786732][ T23] usb 4-1: Product: syz [ 227.810308][ T23] usb 4-1: Manufacturer: syz [ 227.833092][ T23] usb 4-1: SerialNumber: syz [ 228.030649][ T1186] usb 5-1: Using ep0 maxpacket: 16 [ 228.097798][ T1186] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 228.180210][ T23] hub 4-1:1.0: bad descriptor, ignoring hub [ 228.186307][ T23] hub: probe of 4-1:1.0 failed with error -5 [ 228.296566][ T1186] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 228.299743][ T5800] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.500174][ T5850] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 228.507133][ T1186] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.582846][ T1186] usb 5-1: Product: syz [ 228.596102][ T5850] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 228.605741][ T5850] em28xx 1-1:0.0: board has no eeprom [ 228.611047][ T1186] usb 5-1: Manufacturer: syz [ 228.639233][ T1186] usb 5-1: SerialNumber: syz [ 228.651694][ T1186] usb 5-1: config 0 descriptor?? [ 228.660909][ T1186] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 228.678400][ T1186] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 228.708689][ T5850] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 228.717317][ T5850] em28xx 1-1:0.0: dvb set to bulk mode. [ 228.728871][ T23] em28xx 1-1:0.0: Binding DVB extension [ 228.804358][ T5850] usb 1-1: USB disconnect, device number 9 [ 228.831616][ T5850] em28xx 1-1:0.0: Disconnecting em28xx [ 229.398866][ T23] em28xx 1-1:0.0: Registering input extension [ 229.405507][ T5850] em28xx 1-1:0.0: Closing input extension [ 229.442651][ T5850] em28xx 1-1:0.0: Freeing device [ 229.656014][ T1186] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 229.913687][ T7529] loop1: detected capacity change from 0 to 512 [ 230.151967][ T7529] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.181459][ T7529] ext4 filesystem being mounted at /80/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.411751][ T7538] netlink: 40 bytes leftover after parsing attributes in process `syz.0.324'. [ 230.658324][ T1186] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 230.748188][ T9] usb 4-1: USB disconnect, device number 14 [ 230.786373][ T1186] em28xx 5-1:0.0: board has no eeprom [ 230.794879][ T7525] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 231.000856][ T5800] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.017724][ T1186] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 231.027231][ T1186] em28xx 5-1:0.0: dvb set to bulk mode. [ 231.034782][ T9] em28xx 5-1:0.0: Binding DVB extension [ 231.135905][ T1186] usb 5-1: USB disconnect, device number 7 [ 231.183490][ T1186] em28xx 5-1:0.0: Disconnecting em28xx [ 231.311355][ T7545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.326'. [ 231.323267][ T9] em28xx 5-1:0.0: Registering input extension [ 231.331234][ T1186] em28xx 5-1:0.0: Closing input extension [ 231.337491][ T7545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.326'. [ 231.354175][ T7545] netlink: 'syz.1.326': attribute type 18 has an invalid length. [ 231.365430][ T1186] em28xx 5-1:0.0: Freeing device [ 235.119562][ T7602] bond0: (slave ip6gretap0): Error: Device can not be enslaved while up [ 235.258395][ T7603] netlink: 'syz.4.346': attribute type 1 has an invalid length. [ 235.509857][ T7609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.346'. [ 235.606761][ T7603] 8021q: adding VLAN 0 to HW filter on device bond1 [ 239.038021][ T7651] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 239.308188][ T7661] tipc: Started in network mode [ 239.329010][ T7661] tipc: Node identity 964c6b3504b5, cluster identity 4711 [ 239.337898][ T7661] tipc: Enabled bearer , priority 0 [ 239.356975][ T7661] syzkaller0: entered promiscuous mode [ 239.372932][ T7661] syzkaller0: entered allmulticast mode [ 239.426522][ T7663] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 239.614013][ T7668] tipc: Resetting bearer [ 240.107730][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 240.558283][ T28] audit: type=1326 audit(1758232557.722:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7665 comm="syz.1.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd018eba9 code=0x7ffc0000 [ 241.168034][ T5850] tipc: Node number set to 2465819445 [ 241.196323][ T28] audit: type=1326 audit(1758232557.722:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7665 comm="syz.1.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd018eba9 code=0x7ffc0000 [ 241.219889][ T28] audit: type=1326 audit(1758232557.862:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7665 comm="syz.1.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fdcd018eba9 code=0x7ffc0000 [ 241.245284][ T7660] tipc: Resetting bearer [ 241.303560][ T28] audit: type=1326 audit(1758232558.462:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7665 comm="syz.1.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd018eba9 code=0x7ffc0000 [ 241.332839][ T7670] fuse: Unknown parameter 'L' [ 241.450047][ T7671] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 241.451718][ T28] audit: type=1326 audit(1758232558.462:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7665 comm="syz.1.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd018eba9 code=0x7ffc0000 [ 241.493414][ T7660] tipc: Disabling bearer [ 241.517933][ T28] audit: type=1326 audit(1758232558.492:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7665 comm="syz.1.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdcd018eba9 code=0x7ffc0000 [ 241.710964][ T28] audit: type=1326 audit(1758232558.492:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7665 comm="syz.1.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd018eba9 code=0x7ffc0000 [ 241.889169][ T28] audit: type=1326 audit(1758232558.492:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7665 comm="syz.1.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd018eba9 code=0x7ffc0000 [ 241.988667][ T28] audit: type=1326 audit(1758232558.492:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7665 comm="syz.1.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdcd018eba9 code=0x7ffc0000 [ 242.076672][ T28] audit: type=1326 audit(1758232558.492:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7665 comm="syz.1.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd018eba9 code=0x7ffc0000 [ 242.227209][ T7687] virtio-fs: tag not found [ 242.357988][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 243.068065][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 243.233869][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 243.358646][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 243.428115][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.484678][ T9] usb 1-1: Product: syz [ 243.538056][ T9] usb 1-1: Manufacturer: syz [ 243.585468][ T9] usb 1-1: SerialNumber: syz [ 243.811454][ T9] usb 1-1: config 0 descriptor?? [ 243.893248][ T9] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 243.941257][ T9] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 244.785864][ T7698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.371'. [ 245.638693][ T9] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 245.643855][ T7704] loop4: detected capacity change from 0 to 512 [ 245.691602][ T7704] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.373: casefold flag without casefold feature [ 245.745095][ T7704] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.373: couldn't read orphan inode 15 (err -117) [ 245.779262][ T7704] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.491382][ T6518] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.515850][ T9] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 247.546060][ T9] em28xx 1-1:0.0: board has no eeprom [ 247.637711][ T9] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 247.645602][ T9] em28xx 1-1:0.0: dvb set to bulk mode. [ 247.669178][ T5880] em28xx 1-1:0.0: Binding DVB extension [ 247.703213][ T9] usb 1-1: USB disconnect, device number 10 [ 247.748817][ T9] em28xx 1-1:0.0: Disconnecting em28xx [ 248.148788][ T7726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.376'. [ 248.401985][ T5880] em28xx 1-1:0.0: Registering input extension [ 248.420472][ T9] em28xx 1-1:0.0: Closing input extension [ 248.522554][ T9] em28xx 1-1:0.0: Freeing device [ 248.578679][ T7733] loop1: detected capacity change from 0 to 512 [ 248.617192][ T7733] EXT4-fs (loop1): Test dummy encryption mode enabled [ 248.646333][ T7733] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 248.684377][ T7733] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.381: bad orphan inode 131083 [ 248.699551][ T7733] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.907460][ T7746] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 250.378858][ T5800] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.767814][ T7768] netlink: 4 bytes leftover after parsing attributes in process `syz.3.390'. [ 252.448971][ T7768] bridge_slave_1: left allmulticast mode [ 252.456992][ T7768] bridge_slave_1: left promiscuous mode [ 252.465375][ T7768] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.492336][ T7768] bridge_slave_0: left allmulticast mode [ 252.500122][ T7768] bridge_slave_0: left promiscuous mode [ 252.506067][ T7768] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.701560][ T7785] overlayfs: missing 'workdir' [ 254.932225][ T7801] netdevsim netdevsim4: Direct firmware load for 0PqD"2NktTWj%N failed with error -2 [ 254.950291][ T7801] netdevsim netdevsim4: Falling back to sysfs fallback for: 0PqD"2NktTWj%N [ 255.078240][ T7804] tipc: Started in network mode [ 255.083200][ T7804] tipc: Node identity ac14140f, cluster identity 4711 [ 255.091018][ T7804] tipc: New replicast peer: 255.255.255.255 [ 255.099629][ T7804] tipc: Enabled bearer , priority 10 [ 256.080075][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.086746][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.209302][ T9] tipc: Node number set to 2886997007 [ 256.391580][ T7808] netlink: 68 bytes leftover after parsing attributes in process `syz.3.402'. [ 256.446286][ T7808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.402'. [ 256.542438][ T7810] capability: warning: `syz.1.403' uses deprecated v2 capabilities in a way that may be insecure [ 256.887722][ T7820] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 263.628083][ T50] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 264.320021][ T7867] netlink: 32 bytes leftover after parsing attributes in process `syz.3.423'. [ 264.360444][ T7867] netlink: 'syz.3.423': attribute type 1 has an invalid length. [ 264.368219][ T7867] netlink: 224 bytes leftover after parsing attributes in process `syz.3.423'. [ 266.232697][ T7895] netlink: 'syz.3.432': attribute type 1 has an invalid length. [ 266.591765][ T7910] netlink: 120 bytes leftover after parsing attributes in process `syz.3.436'. [ 269.029876][ T7939] loop4: detected capacity change from 0 to 8 [ 269.042223][ T7939] cramfs: Unknown parameter '| ]9FNC8-:~B' [ 269.464535][ T7943] binder: 7942:7943 ioctl 4018620d 0 returned -22 [ 269.484852][ T5803] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 270.457853][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 270.457871][ T28] audit: type=1326 audit(1758232587.612:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7951 comm="syz.4.445" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1217d8eba9 code=0x0 [ 270.612089][ T7955] syz.1.440: attempt to access beyond end of device [ 270.612089][ T7955] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 271.008710][ T7963] warning: `syz.3.448' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 272.576785][ T7979] loop4: detected capacity change from 0 to 4096 [ 273.222720][ T7987] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 273.240066][ T7979] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 273.304799][ T7979] NILFS (loop4): mounting fs with errors [ 275.234693][ T7979] syz.4.455 (7979) used greatest stack depth: 19824 bytes left [ 276.597943][ T23] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 276.780233][ T23] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 276.796065][ T23] usb 5-1: config 1 has no interface number 0 [ 276.806473][ T23] usb 5-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 276.823679][ T23] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.826530][ T8017] mmap: syz.1.466 (8017) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 276.868708][ T23] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 276.890520][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.900253][ T23] usb 5-1: Product: syz [ 276.908204][ T23] usb 5-1: Manufacturer: syz [ 276.923728][ T23] usb 5-1: SerialNumber: syz [ 276.954952][ T8010] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 276.973516][ T23] usb 5-1: Expected 3 endpoints, found: 2 [ 279.545072][ T9] usb 5-1: USB disconnect, device number 8 [ 281.523323][ T9] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 281.607695][ T5836] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 281.760250][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.789092][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 281.831443][ T5836] usb 4-1: config index 0 descriptor too short (expected 19492, got 36) [ 281.840025][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 281.855744][ T5836] usb 4-1: config 0 has too many interfaces: 36, using maximum allowed: 32 [ 281.872690][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 281.893041][ T5836] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 36 [ 281.907727][ T5836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 281.931250][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 281.951679][ T5836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.962038][ T9] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 281.972155][ T9] usb 5-1: Manufacturer: syz [ 281.981505][ T5836] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 281.999115][ T9] usb 5-1: config 0 descriptor?? [ 282.015010][ T5836] usb 4-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 282.043889][ T5836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.094890][ T5836] usb 4-1: config 0 descriptor?? [ 282.169931][ T8070] loop1: detected capacity change from 0 to 4096 [ 282.207370][ T8070] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 282.402737][ T8070] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 282.430301][ T9] rc_core: IR keymap rc-hauppauge not found [ 282.442781][ T8070] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 282.450807][ T9] Registered IR keymap rc-empty [ 282.471067][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 282.527938][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 282.564944][ T5836] lg-g15 0003:046D:C225.0006: item fetching failed at offset 1/5 [ 282.585693][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 282.611418][ T5836] lg-g15: probe of 0003:046D:C225.0006 failed with error -22 [ 282.961891][ T5836] usb 4-1: USB disconnect, device number 15 [ 283.184550][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input15 [ 283.240881][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 283.288471][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 283.351166][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 283.437732][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 283.477791][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 283.537715][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 283.591764][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 283.629439][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 283.670368][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 283.705334][ T8086] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 283.707880][ T8070] usb usb1: check_ctrlrecip: process 8070 (syz.1.476) requesting ep 01 but needs 81 [ 283.728055][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 283.823028][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 283.848836][ T8088] kvm: pic: non byte write [ 283.853446][ T8088] kvm: pic: non byte write [ 283.860334][ T9] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 283.870081][ T9] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 283.881466][ T8088] kvm: pic: non byte write [ 283.886061][ T8088] kvm: pic: non byte write [ 283.915734][ T9] usb 5-1: USB disconnect, device number 9 [ 283.951964][ T8088] kvm: pic: non byte write [ 283.961976][ T8088] kvm: pic: non byte write [ 284.006311][ T8088] kvm: pic: non byte write [ 284.048293][ T8088] kvm: pic: non byte write [ 284.083584][ T8088] kvm: pic: non byte write [ 284.104762][ T8088] kvm: pic: non byte write [ 284.123101][ T8088] kvm: pic: single mode not supported [ 286.904798][ T5836] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 287.179332][ T5836] usb 2-1: config 17 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 287.244706][ T8118] UBIFS error (pid: 8118): cannot open "c:::", error -22 [ 288.098254][ T5836] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 288.114906][ T5836] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.132055][ T8111] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 288.200063][ T5836] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 288.337537][ T5836] usb 2-1: USB disconnect, device number 9 [ 291.614155][ T8149] netlink: 'syz.3.497': attribute type 10 has an invalid length. [ 291.739654][ T8145] syz.1.496 (8145): drop_caches: 2 [ 292.134254][ T8152] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 292.189394][ T8152] qnx6: wrong signature (magic) in superblock #1. [ 292.197222][ T8152] qnx6: unable to read the first superblock [ 292.294243][ T8156] loop1: detected capacity change from 0 to 1024 [ 292.521928][ T8149] netlink: 12 bytes leftover after parsing attributes in process `syz.3.497'. [ 294.108150][ T8178] tipc: Enabled bearer , priority 0 [ 294.148843][ T8178] syzkaller0: entered promiscuous mode [ 294.154448][ T8178] syzkaller0: entered allmulticast mode [ 294.276200][ T8178] tipc: Resetting bearer [ 294.306959][ T8176] tipc: Resetting bearer [ 294.417036][ T8176] tipc: Disabling bearer [ 297.417364][ T8207] Bluetooth: MGMT ver 1.22 [ 297.970929][ T28] audit: type=1326 audit(1758232615.132:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.1.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdcd012ada9 code=0x7ffc0000 [ 298.121320][ T28] audit: type=1326 audit(1758232615.182:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.1.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdcd012ada9 code=0x7ffc0000 [ 298.207914][ T28] audit: type=1326 audit(1758232615.182:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.1.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdcd012ada9 code=0x7ffc0000 [ 298.338000][ T28] audit: type=1326 audit(1758232615.182:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.1.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdcd012ada9 code=0x7ffc0000 [ 298.437857][ T28] audit: type=1326 audit(1758232615.182:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.1.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdcd012ada9 code=0x7ffc0000 [ 298.494249][ T28] audit: type=1326 audit(1758232615.182:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.1.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdcd012ada9 code=0x7ffc0000 [ 298.688497][ T28] audit: type=1326 audit(1758232615.182:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.1.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdcd012ada9 code=0x7ffc0000 [ 298.799641][ T28] audit: type=1326 audit(1758232615.182:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.1.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdcd012ada9 code=0x7ffc0000 [ 298.822248][ T28] audit: type=1326 audit(1758232615.182:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.1.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdcd012ada9 code=0x7ffc0000 [ 298.844723][ T28] audit: type=1326 audit(1758232615.182:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.1.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdcd012ada9 code=0x7ffc0000 [ 299.668142][ T8223] netlink: 684 bytes leftover after parsing attributes in process `syz.0.523'. [ 301.133284][ T5850] IPVS: starting estimator thread 0... [ 301.469644][ T8245] IPVS: using max 16 ests per chain, 38400 per kthread [ 304.120955][ T8260] input: syz1 as /devices/virtual/input/input17 [ 305.327044][ T8269] netlink: 24 bytes leftover after parsing attributes in process `syz.4.533'. [ 306.630936][ T8279] sctp: failed to load transform for md5: -2 [ 313.003288][ T8362] kvm: emulating exchange as write [ 313.344241][ T8374] loop0: detected capacity change from 0 to 4096 [ 313.369431][ T8374] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 313.505367][ T8374] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 314.945527][ T8380] loop4: detected capacity change from 0 to 1024 [ 314.976258][ T8380] hfsplus: unable to parse mount options [ 315.509646][ T8374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.563'. [ 315.976406][ T5792] ntfs3: loop0: ino=1a, ntfs_sync_fs failed, -22. [ 315.987988][ T5792] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 317.475224][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.481764][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.497451][ T8406] netlink: 'syz.3.574': attribute type 10 has an invalid length. [ 317.900607][ T8410] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 317.988046][ T8410] qnx6: wrong signature (magic) in superblock #1. [ 317.994731][ T8410] qnx6: unable to read the first superblock [ 318.570069][ T8406] netlink: 12 bytes leftover after parsing attributes in process `syz.3.574'. [ 319.548472][ T5795] Bluetooth: hci2: command 0x0406 tx timeout [ 319.684405][ T8422] loop1: detected capacity change from 0 to 2048 [ 319.762954][ T8422] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.715724][ T5800] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.894089][ T8434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.582'. [ 322.145822][ T8452] IPVS: length: 73 != 24 [ 325.001386][ T8472] bond0: (slave ip6gretap0): Error: Device can not be enslaved while up [ 326.127686][ T8481] erofs: (device nbd4): erofs_read_superblock: cannot find valid erofs superblock [ 326.782382][ T8477] mkiss: ax0: crc mode is auto. [ 328.713015][ T28] kauditd_printk_skb: 339 callbacks suppressed [ 328.713031][ T28] audit: type=1107 audit(1758232645.872:372): pid=8500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 330.107790][ T5795] Bluetooth: hci2: command 0x0406 tx timeout [ 332.907658][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 336.014966][ T8559] loop0: detected capacity change from 0 to 2048 [ 336.627480][ T50] Bluetooth: hci2: unexpected event for opcode 0x0c7a [ 339.317000][ T8591] tipc: Enabled bearer , priority 0 [ 339.345312][ T8591] syzkaller0: entered promiscuous mode [ 339.367866][ T27] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 339.395901][ T8591] syzkaller0: entered allmulticast mode [ 339.513290][ T8591] tipc: Resetting bearer [ 339.526632][ T8589] tipc: Resetting bearer [ 339.703175][ T8589] tipc: Disabling bearer [ 339.751816][ T27] usb 5-1: Using ep0 maxpacket: 16 [ 339.766667][ T27] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.785290][ T27] usb 5-1: config 0 has no interfaces? [ 339.791216][ T27] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 339.800472][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.662427][ T27] usb 5-1: config 0 descriptor?? [ 341.028454][ T8588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.624'. [ 341.341120][ T8588] bond_slave_0: entered promiscuous mode [ 341.347254][ T8588] bond_slave_1: entered promiscuous mode [ 341.359273][ T8588] macvtap1: entered promiscuous mode [ 341.365400][ T8588] bond0: entered promiscuous mode [ 341.374673][ T8588] macvtap1: entered allmulticast mode [ 341.764483][ T8610] loop1: detected capacity change from 0 to 1024 [ 341.794167][ T8610] hfsplus: unable to parse mount options [ 342.066060][ T8588] bond0: entered allmulticast mode [ 342.122994][ T8588] bond_slave_0: entered allmulticast mode [ 342.129302][ T8588] bond_slave_1: entered allmulticast mode [ 342.139180][ T8588] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 342.191269][ T5789] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 342.248537][ T8605] bond0: left allmulticast mode [ 342.263159][ T8605] bond_slave_0: left allmulticast mode [ 342.278788][ T8605] bond_slave_1: left allmulticast mode [ 342.285110][ T8605] bond0: left promiscuous mode [ 342.290910][ T8605] bond_slave_0: left promiscuous mode [ 342.296519][ T8605] bond_slave_1: left promiscuous mode [ 342.747923][ T27] usb 5-1: USB disconnect, device number 10 [ 343.722522][ T27] IPVS: starting estimator thread 0... [ 344.121512][ T5795] Bluetooth: hci2: command 0x0406 tx timeout [ 344.909723][ T8627] IPVS: using max 16 ests per chain, 38400 per kthread [ 348.051204][ T5795] Bluetooth: hci1: ISO packet for unknown connection handle 0 Connection to 10.128.0.151 closed by remote host. [ 355.047288][ T1118] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.153345][ T5800] infiniband syz1: set down [ 355.203262][ T59] smc: removing ib device syz1 [ 355.238626][ T1118] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.255050][ T23] infiniband syz1: ib_query_port failed (-19) [ 355.343623][ T1118] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.505347][ T1118] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.195184][ T1118] tipc: Disabling bearer [ 356.202841][ T1118] tipc: Left network mode [ 357.253405][ T1118] hsr_slave_0: left promiscuous mode [ 357.259476][ T1118] hsr_slave_1: left promiscuous mode [ 357.265449][ T1118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.273206][ T1118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.281677][ T1118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.289146][ T1118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.314038][ T1118] veth1_macvtap: left promiscuous mode [ 357.319815][ T1118] veth0_macvtap: left promiscuous mode [ 357.325402][ T1118] veth1_vlan: left promiscuous mode [ 357.331047][ T1118] veth0_vlan: left promiscuous mode [ 357.965920][ T1118] team0 (unregistering): Port device team_slave_1 removed [ 358.023327][ T1118] team0 (unregistering): Port device team_slave_0 removed [ 358.084597][ T1118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 358.140225][ T1118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 358.746772][ T1118] bond0 (unregistering): Released all slaves [ 359.092246][ T1118] IPVS: stop unused estimator thread 0... [ 359.209357][ T1118] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.293547][ T1118] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.375539][ T1118] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.437520][ T1118] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.585015][ T1118] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.674266][ T1118] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.749043][ T1118] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.816259][ T1118] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.961379][ T1118] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.042217][ T1118] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.099052][ T1118] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.179568][ T1118] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.403210][ T1118] tipc: Left network mode [ 361.559372][ T1118] IPVS: stopping backup sync thread 8086 ... [ 362.061177][ T1118] hsr_slave_0: left promiscuous mode [ 362.067167][ T1118] hsr_slave_1: left promiscuous mode [ 362.074848][ T1118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.082322][ T1118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.092579][ T1118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.100200][ T1118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.108079][ T1118] bridge_slave_1: left allmulticast mode [ 362.113752][ T1118] bridge_slave_1: left promiscuous mode [ 362.119669][ T1118] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.129096][ T1118] bridge_slave_0: left allmulticast mode [ 362.134769][ T1118] bridge_slave_0: left promiscuous mode [ 362.140618][ T1118] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.155969][ T1118] hsr_slave_0: left promiscuous mode [ 362.162081][ T1118] hsr_slave_1: left promiscuous mode [ 362.168597][ T1118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.176018][ T1118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.185442][ T1118] bridge_slave_1: left allmulticast mode [ 362.195506][ T1118] bridge_slave_1: left promiscuous mode [ 362.201548][ T1118] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.212822][ T1118] bridge_slave_0: left allmulticast mode [ 362.218552][ T1118] bridge_slave_0: left promiscuous mode [ 362.224232][ T1118] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.239223][ T1118] hsr_slave_0: left promiscuous mode [ 362.245108][ T1118] hsr_slave_1: left promiscuous mode [ 362.251359][ T1118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.258984][ T1118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.266784][ T1118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.274347][ T1118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.282326][ T1118] bridge_slave_1: left allmulticast mode [ 362.288034][ T1118] bridge_slave_1: left promiscuous mode [ 362.293748][ T1118] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.302784][ T1118] bridge_slave_0: left allmulticast mode [ 362.308653][ T1118] bridge_slave_0: left promiscuous mode [ 362.314383][ T1118] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.384061][ T1118] veth1_macvtap: left promiscuous mode [ 362.389736][ T1118] veth0_macvtap: left promiscuous mode [ 362.395325][ T1118] veth1_vlan: left promiscuous mode [ 362.400680][ T1118] veth0_vlan: left promiscuous mode [ 362.409359][ T1118] veth1_macvtap: left promiscuous mode [ 362.414925][ T1118] veth0_macvtap: left promiscuous mode [ 362.420702][ T1118] veth1_vlan: left promiscuous mode [ 362.425969][ T1118] veth0_vlan: left promiscuous mode [ 362.434739][ T1118] veth1_macvtap: left promiscuous mode [ 362.440949][ T1118] veth0_macvtap: left promiscuous mode [ 362.447830][ T1118] veth1_vlan: left promiscuous mode [ 362.453110][ T1118] veth0_vlan: left promiscuous mode [ 363.296875][ T1118] team0 (unregistering): Port device team_slave_1 removed [ 363.354469][ T1118] team0 (unregistering): Port device team_slave_0 removed [ 363.407033][ T1118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.460251][ T1118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 364.061265][ T1118] bond0 (unregistering): Released all slaves