last executing test programs: 13.490056865s ago: executing program 0 (id=305): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@global=@item_4={0x3, 0x1, 0x0, "c9c0e2f5"}, @local=@item_4={0x3, 0x2, 0x2, "71b9a7ab"}, @main=@item_4={0x3, 0x0, 0xb, "1000090e"}]}}, 0x0}, 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f0000000180)={0x1, 0xffffffff, 0x4, 0x0, 0x4, 0x3c}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 10.298652351s ago: executing program 0 (id=319): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000200)={0x24, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00032300000023035d95b5db2617b4c56db3094885239e187f30232fb4711d740fabfa51"], 0x0, 0x0}, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) socket$nl_generic(0x10, 0x3, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 8.593388082s ago: executing program 3 (id=325): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f00000001c0)={[{@treelog}, {@nodatacow}, {@max_inline={'max_inline', 0x3d, [0x32, 0x33, 0x78, 0x39, 0x65, 0x36]}}, {@space_cache}, {@nodatasum}, {@nobarrier}, {@flushoncommit}, {@user_subvol_rm}, {@ref_verify}, {@noenospc_debug}, {@clear_cache}, {@commit={'commit', 0x3d, 0x3}}, {@ssd}, {@nobarrier}, {@compress_force}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") chdir(&(0x7f0000000380)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000002480)={{r0}, 0x0, 0x0, @inherit={0x0, 0x0}, @subvolid=0x9}) socket$nl_route(0x10, 0x3, 0x0) 8.14460438s ago: executing program 0 (id=326): openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000840)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000bf8000/0x1000)=nil, 0x1000, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) readv(r3, &(0x7f0000000180)=[{&(0x7f0000000100)=""/64, 0x40}], 0x1) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 7.957283524s ago: executing program 4 (id=327): syz_80211_inject_frame(0x0, 0x0, 0x33) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0xc0189436, &(0x7f0000000140)) 6.994439822s ago: executing program 1 (id=328): mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CAP_HALT_POLL(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)={0xb6, 0x0, 0xfd}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000440)={0x0, 0x7, 0x0, 0x0, 0x2, [], [0xfd, 0x5, 0x40, 0x7], [0x9, 0x8001, 0xa, 0xfffffffd], [0x80000000000bf0, 0x8004000000004, 0xf95000000000, 0xffffffffffff0001]}) fsetxattr$security_evm(r0, &(0x7f0000000140), &(0x7f0000000200)=@v1={0x2, "4c922b"}, 0x4, 0x2) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000100)=0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@can_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "5ba785fc32279e7c"}, 0x4}}, @CGW_CS_XOR={0x8, 0x5, {0x0, 0x0, 0xf7}}]}, 0x34}}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r3, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) 6.989004612s ago: executing program 0 (id=329): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x20402) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000180)={0x1, 0xffffffff, 0x4, 0x0, 0x4, 0x3c}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 6.196157479s ago: executing program 3 (id=332): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x2, 0x3, 0x801, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x18}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x40) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000001c0)=0xffffffffffffffff) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r6, 0x0, 0x0}) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6, 0x0, 0x0}) r9 = io_uring_setup(0x1951, &(0x7f0000000140)={0x0, 0x1e98, 0x0, 0x2, 0x2b2}) r10 = syz_open_dev$usbmon(&(0x7f0000000080), 0xdca6, 0x0) read$usbmon(r10, 0x0, 0x0) ioctl$MON_IOCG_STATS(r10, 0x80089203, &(0x7f0000000000)) close_range(r9, 0xffffffffffffffff, 0x0) r11 = getpid() r12 = syz_pidfd_open(r11, 0x0) setns(r12, 0x46020000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000400)={r8}) 6.17830415s ago: executing program 4 (id=333): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x82, &(0x7f0000000700)=ANY=[@ANYBLOB='iocharset=default,noadinicb,gid=forget,gid=ignore,nostrict,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c616e63686f723d30303030000088be0900303030303030303030312c7569643d666f726765742c00215e8c2e42462f3ab5e1f7c0527abbb422be9178aa60681964adb069ae876c4a599d560075ac47c0de1a9bb9146af6433efdcdac853a8e8f16d6bad90ecce0a1fab46f48331e6b3c325c08df3c334e4da28067a30b3b1dc64bf692c712fc273bc1702008f563765c6f3e67d97e1369973c2a87f0ecca7320819863179fb85e394a8cf1d62c70d8306633b6958ebf998a0685bc5cdd1f97291328743add4c867115fae1082f8faf482e15eb939968"], 0xfd, 0xc34, &(0x7f0000001080)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000004, 0x10012, r0, 0x0) symlink(&(0x7f0000000540)='./file0\x00', &(0x7f0000000000)='./file0\x00') open(&(0x7f0000000000)='.\x00', 0x0, 0x0) 5.827113458s ago: executing program 2 (id=334): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x44}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r2], 0x48}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x14) r6 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x64, r6, 0x601, 0x70bd2b, 0x0, {}, [{{0x8, 0x1, r4}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x8001}, 0x20040090) 5.214230295s ago: executing program 4 (id=335): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c85000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x10, 0x803, 0x0) syz_io_uring_setup(0x5d5f, 0x0, 0x0, &(0x7f0000000280)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) pipe2$watch_queue(0x0, 0x80) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe342"], 0x10b8}, 0xff00) syz_emit_ethernet(0x0, 0x0, 0x0) 4.455052172s ago: executing program 2 (id=336): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0) r1 = syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0x0, 0x13090}, &(0x7f0000000100), &(0x7f0000000080)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 4.394356142s ago: executing program 0 (id=337): openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setparam(r0, &(0x7f0000000080)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lstat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)) r3 = memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r6, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000100)={r7, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000800)={0x0, 0x0, r8}) close_range(r3, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f00000000c0)=r9, 0x4) listen(0xffffffffffffffff, 0x0) close(0xffffffffffffffff) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) 4.345993225s ago: executing program 3 (id=338): syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080047000030000000000006907800000000e00000018608ffffffff"], 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000300000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x693, @empty}, 0x1c) write$binfmt_misc(r4, 0x0, 0xfff7) 4.253217793s ago: executing program 1 (id=339): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) r0 = landlock_create_ruleset(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000140)={0x100}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) r5 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f00000002c0)={0x20}, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) 3.257588784s ago: executing program 4 (id=340): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix_mp={0x0, 0x0, 0x50323234, 0x0, 0x0, [], 0x0, 0x0, 0x7}}) 3.154362541s ago: executing program 1 (id=341): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='qgroup_num_dirty_extents\x00', r0}, 0x18) openat$ppp(0xffffffffffffff9c, &(0x7f0000000e40), 0x600c01, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$OBJ_PIN_MAP(0x9, &(0x7f0000000040)=@generic={0x0, r3}, 0x18) 3.107563464s ago: executing program 2 (id=342): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000e19400000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.897013591s ago: executing program 0 (id=343): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f00000001c0)={[{@treelog}, {@nodatacow}, {@max_inline={'max_inline', 0x3d, [0x32, 0x33, 0x78, 0x39, 0x65, 0x36]}}, {@space_cache}, {@nodatasum}, {@nobarrier}, {@flushoncommit}, {@user_subvol_rm}, {@ref_verify}, {@noenospc_debug}, {@clear_cache}, {@commit={'commit', 0x3d, 0x3}}, {@ssd}, {@nobarrier}, {@compress_force}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000002480)={{r0}, 0x0, 0x0, @inherit={0x0, 0x0}, @subvolid=0x9}) socket$nl_route(0x10, 0x3, 0x0) 2.765627667s ago: executing program 4 (id=344): r0 = socket$inet_smc(0x2b, 0x1, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x48) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @default, @bcast]}, 0x10) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getrlimit(0x7, 0x0) close(r5) close_range(r0, 0xffffffffffffffff, 0x0) 2.457485749s ago: executing program 1 (id=345): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x82, &(0x7f0000000700)=ANY=[@ANYBLOB='iocharset=default,noadinicb,gid=forget,gid=ignore,nostrict,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c616e63686f723d30303030000088be0900303030303030303030312c7569643d666f726765742c00215e8c2e42462f3ab5e1f7c0527abbb422be9178aa60681964adb069ae876c4a599d560075ac47c0de1a9bb9146af6433efdcdac853a8e8f16d6bad90ecce0a1fab46f48331e6b3c325c08df3c334e4da28067a30b3b1dc64bf692c712fc273bc1702008f563765c6f3e67d97e1369973c2a87f0ecca7320819863179fb85e394a8cf1d62c70d8306633b6958ebf998a0685bc5cdd1f97291328743add4c867115fae1082f8faf482e15eb939968"], 0xfd, 0xc34, &(0x7f0000001080)="$eJzs3U9sHNd9B/DfGy5F0m4rJk5Uu42LTVukMmO5sqSYilW4q5pmG0CWiVDMLQBX5EpdmFoSJNXIbtowvfTQQ4Ci6CEnAq1RIEUDoymKHtnWBZKLD4VPPREtbARFD2wRIKeAxcy+FVf/LMkkJcr+fGzqOzv73sx7M+MZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxO+8cvb48+lhtwIAeJDOT3/1+AnPfwD4RLng//8BAAAAAAAAAAAAAOCgS1HEE5Fi6fxWmq0+dw2fa3euXpuZmLx9tZFU1Ryoypc/w8+fOHnqSy+Mn+7lh9ffa0/Fa9MXztZfXryytNxaWWnN12c67bnF+dY9b2G39W82Vh2A+pXXr85furRSP/HcyRu+vjb6wdDjR0bPjD9z7Ole2ZmJycnpvjK1wY+891vcaYTHoSjiWKR49vs/Ts2IKGL3x+Iu185+G6k6MVZ1YmZisurIQrvZWS2/nOodiCKi3lep0TtGD+Bc7EojYq1sftngsbJ700vN5ebFhVZ9qrm82l5tL3amUre1ZX/qUcTpFLEeEZtDt25uMIqoRYrvHt5KFyNioHccvlgNDL5zO4p97OM9KNtZH4xYLx6Bc3aADUURr0aKn7xTxFx5zPJPfCHi1TL/MeKtMl+KSOWFcSri/eo6GnnILWcv1KKIPyvP/5mtNF/dD3r3lXNfq3+lc2mxr2zvvvLIPx8epAN+bxqOIprVHX8rffTf7AAAAAAAAAAAAAAAAACw10aiiKcixSv//gfVuOKoxqUfPjP+u6M/3z9m/Mm7bKcs+1xErBX3Nib3UB5CPJWmUnrIY4k/yYajiD/K4/++/bAbAwAAAAAAAAAAAAAAAAAA8IlWxHuR4sV3j6b16J9TvN25XL/QvLjQnRW2N/dvb8707e3t7XrqZiPnbM61nOs5N3Ju5owi18/ZyDmbcy3nes6NnJs5YyDXz9nIOZtzLed6zo2cmzmjluvnbOSczbmWcz3nRs7NnHFA5u4FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPg4KaKIn0WK73xjK0WKiEbEbHRzY6hXBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4mIZSET+IFPXfa1xfV4uIVP3bdbT85VQ0DpX56WiMl/lSNM7mbFZZa3z7IbSf3RlMRfwoUgwNv339hOfzP9j9dP0yiLe+ufPpl2rdHOh9OfrB0ONHDp8Zn/yVJ++0nG7XgLFz7c7Va/WZicnJ6b7Vtbz3T/etG837Lfam60TEyhtvvt5cWGgtW/hkLNS6C7XY0y2PROztBvduodZdyPereOjtucNC42A0Y2chqnv/be/ZfGyUz//3I8VvvvsfvQd+7/n/c91P15/w8dM/3nn+v3jzhvbp+f9E37oX8+9GBmsRw6tXlgaPRAyvvPHmsfaV5uXW5Vbn1PHjXx4f//LJ44OHIoYvtRdafUu7PlQAAAAAAAAAAAAAAAAAD1Yq4rcjRfNHW6keEdeq8VqjZ8afOfb0QAxU461uGLf12vSFs/WXF68sLbdWVlrz9ZlOe25xvnWvuxuuhnvNTEzuS2fuamSf2z8y/PLi0hvL7cu/v3rb7x8bPntxZXW5OXf7r2MkiohG/5qxqsEzE5NVoxfazU5VdWqPBmYOpiL+M1LMnaqnz+d1efxfGe8N9pXtH/+/1re+Wt6n8X+fumk/KRXx00jxG3/+ZHy+audjccsxy+X+OlKMnf5cLheHynK9NnTfK9AdGViW/d9I8fc/u7Fsr+9P7JR9/v6O7sFXnv/DkeIHf/q9+NW87sb3P+yM/+w//4/dvKF9Ov+f6Vv32A3vK9h118nn/1ikeOmJt+PX8roPe/9HEdvb29+KOJoLX38/xz6d/8/2rRuN7n5/fe+6DwAAAAAAAAAA8MgaTEX8TaR4erKWXsjr7uXv/83fvKF9+vtfv9i3bv4BzVe064MKAAAAAAfEYCrivUhxefXt62Oo+8Z/3zj+87d25l6fSDd9W/053y9U7w3Yyz//6zea9zu7+24DAAAAAAAAAAAAAAAAAADAgZJSES/k+dRn7zKf+kakeOW/n83l0pGyXG8e+NHq1+Hzi51jZxcWFueaq82LC6369FJzrlXW/Uyk2Pqrz+W6RTW/em+++e4c78PbvbnYlyPF5N/2ynbnYu/NTd6dD7w7F3tZ9lOR4r/+7sayvXmsP7tT9kRZ9i8jxdf/6fZlj+yUPVmW/V6k+OHX672yj5Vle+9H7b6TdLgWC63n5hYXbnkVKgAAAAAAAAAAAAAAAAAAANyvwVTEn0SK/7myHmt52H+e/783A3+tV/atb/bN93+Ta9U8/6PV/P93Wv4o8/+P7llPAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg0ZGiiDcjxdL5rbQxVH7uGj7X7ly9NjMxeftqI6mqOVCVL3+Gnz9x8tSXXhg/3csPr7/XnorXpi+crb+8eGVpubWy0pqvz3Tac4vzrXvewm7r7xy6rrHqANSvvH51/tKllfqJ507e8PW10Q+GHj8yemb8mWNP98rOTExOTveVqQ3ex97vq3E7DkURfxEpnv3+j9M/D0UUsftjcZdrZ7+NVJ0YqzoxMzFZdWSh3eysll9O9Q5EEVHvq9ToHaMHcC52pRGxVja/bPBY2b3ppeZy8+JCqz7VXF5tr7YXO1Op29qyP/Uo4nSKWI+IzaFbNzcYRbweKb57eCv9y1DEQO84fPH89FePn7hzO4p97OM9KNtZH4xYLx6Bc3aADUUR/xApfvLO0fjXoYhadH/iCxGv9hd8KSKVF8apiPdvcx3xaKpFEf9Xnv8zW+mdofJ+0LuvnPta/SudS4t9ZXv3lYP0fNi+/2txZA92e+8O+L1pOIr4YXXH30r/5r9rAAAAAAAAAAAAAAAAgAOkiF+OFC++ezRV44Ovjyludy7XLzQvLnSH9fXG/tUj/rDM7e3t7XrqZiPnbM61nOs5N3Ju5owi18/ZyDmbcy3nes6NnJs5YyDXz9nIOZtzLed6zo2cmzmjVsX29va3uvVruX7OtZzrtYiirJ8/b+aMAzJ2DwAAAAAAAAAAAAAAAAAA+Hgpqn9SfOcbW6maS7URMRvd3DAf6Mfe/wcAAP//3sf+xA==") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000004, 0x10012, r0, 0x0) symlink(&(0x7f0000000540)='./file0\x00', &(0x7f0000000000)='./file0\x00') open(&(0x7f0000000000)='.\x00', 0x0, 0x0) 2.377816822s ago: executing program 2 (id=346): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x44}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r2], 0x48}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x14) r6 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x64, r6, 0x601, 0x70bd2b, 0x0, {}, [{{0x8, 0x1, r4}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x8001}, 0x20040090) 1.52219225s ago: executing program 4 (id=347): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x20402) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000180)={0x1, 0xffffffff, 0x4, 0x0, 0x4, 0x3c}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 1.509724973s ago: executing program 3 (id=348): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x2, 0x3, 0x801, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x18}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x40) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000001c0)=0xffffffffffffffff) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r6, 0x0, 0x0}) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6, 0x0, 0x0}) r9 = io_uring_setup(0x1951, &(0x7f0000000140)={0x0, 0x1e98, 0x0, 0x2, 0x2b2}) r10 = syz_open_dev$usbmon(&(0x7f0000000080), 0xdca6, 0x0) read$usbmon(r10, 0x0, 0x0) ioctl$MON_IOCG_STATS(r10, 0x80089203, &(0x7f0000000000)) close_range(r9, 0xffffffffffffffff, 0x0) r11 = getpid() r12 = syz_pidfd_open(r11, 0x0) setns(r12, 0x46020000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000400)={r8}) 1.22585567s ago: executing program 2 (id=349): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x100c0d4, &(0x7f0000000340)=ANY=[], 0x1, 0x270, &(0x7f00000008c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) write$cgroup_int(r0, &(0x7f0000000200), 0x4243b) 424.868306ms ago: executing program 1 (id=350): r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000240)="03", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000580)="21ac2d15c078ace9e7fdbde93cb30798f7f0908051a28e6b682170f0f2cc203c78177710db9d200e2587d5799483b5a2b5736c80418ddc07f6f47ba67ae4dd6da5c64def2b1c5a9bcb7037ef3fbc9f34bd4a7f16766d06cdcd5c01d514190eb70600000000000000c19ddaf311c5482c1bee22bf18127dda212703bb305d95d708a9232943961cb1e3e384bc59d4ec38e59243965dd94c55c14ac28301345559b20fc62c23817d7995b500e5c5ce601eb56b8a83d1ab511851aec9040e", 0xbd, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r1}, &(0x7f00000001c0)=""/51, 0x33, &(0x7f0000000340)={&(0x7f0000000280)={'crc32\x00'}, &(0x7f0000000180)="560757f92d53", 0x6}) 424.067747ms ago: executing program 3 (id=351): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}}], {0x14, 0x10}}, 0x9c}}, 0x0) 187.893647ms ago: executing program 3 (id=352): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000f629"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x413, &(0x7f0000000100)={[{@bh}, {@errors_continue}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@fsname={'fsname', 0x3d, '+'}}], 0x2c}, 0x84, 0x45a, &(0x7f0000000480)="$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") r7 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r7, 0x6609) 186.483115ms ago: executing program 2 (id=353): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x400, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x5}) ioctl$FBIOPUT_CON2FBMAP(r1, 0x4610, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r2, 0x81fd) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) r5 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_usb_disconnect(r5) close_range(r4, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=354): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/crypto\x00', 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000000240)=""/102, 0x9e, 0x66, 0x0, 0xffff, 0x0, @void, @value}, 0x20) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendfile(r2, r0, 0x0, 0x20000023890) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.59' (ED25519) to the list of known hosts. [ 74.210741][ T5838] cgroup: Unknown subsys name 'net' [ 74.379988][ T5838] cgroup: Unknown subsys name 'cpuset' [ 74.388474][ T5838] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.968728][ T5838] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.031536][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.040291][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.055737][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.063430][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.071453][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.079831][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.087228][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.094521][ T5855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.103843][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.113062][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.122474][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 80.131525][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.139019][ T5160] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.151128][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.159064][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.169156][ T5160] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.179627][ T5160] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 80.199178][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.208790][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.232129][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.240052][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.249636][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.258130][ T5853] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 80.268567][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.297243][ T5855] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.305651][ T5855] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.314353][ T5855] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.324602][ T5855] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.334723][ T5855] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 80.342234][ T5855] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.535947][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 80.734490][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.741912][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.749530][ T5848] bridge_slave_0: entered allmulticast mode [ 80.757312][ T5848] bridge_slave_0: entered promiscuous mode [ 80.780494][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 80.789964][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.798189][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.805357][ T5848] bridge_slave_1: entered allmulticast mode [ 80.812428][ T5848] bridge_slave_1: entered promiscuous mode [ 80.845473][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 80.903530][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 80.941786][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.955491][ T5859] chnl_net:caif_netlink_parms(): no params data found [ 80.977646][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.067662][ T5848] team0: Port device team_slave_0 added [ 81.115075][ T5848] team0: Port device team_slave_1 added [ 81.128925][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.136654][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.143820][ T5852] bridge_slave_0: entered allmulticast mode [ 81.151573][ T5852] bridge_slave_0: entered promiscuous mode [ 81.158699][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.165808][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.176269][ T5856] bridge_slave_0: entered allmulticast mode [ 81.182975][ T5856] bridge_slave_0: entered promiscuous mode [ 81.198511][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.205637][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.213392][ T5863] bridge_slave_0: entered allmulticast mode [ 81.220791][ T5863] bridge_slave_0: entered promiscuous mode [ 81.253717][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.261921][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.269314][ T5852] bridge_slave_1: entered allmulticast mode [ 81.275980][ T5852] bridge_slave_1: entered promiscuous mode [ 81.282719][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.290559][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.297875][ T5856] bridge_slave_1: entered allmulticast mode [ 81.304575][ T5856] bridge_slave_1: entered promiscuous mode [ 81.319888][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.327110][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.334353][ T5863] bridge_slave_1: entered allmulticast mode [ 81.341485][ T5863] bridge_slave_1: entered promiscuous mode [ 81.408671][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.419085][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.426119][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.452275][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.464700][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.476279][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.483456][ T5859] bridge_slave_0: entered allmulticast mode [ 81.490428][ T5859] bridge_slave_0: entered promiscuous mode [ 81.509239][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.520529][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.534712][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.552350][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.559601][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.586346][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.604233][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.612578][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.621060][ T5859] bridge_slave_1: entered allmulticast mode [ 81.628003][ T5859] bridge_slave_1: entered promiscuous mode [ 81.636683][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.654806][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.674041][ T5863] team0: Port device team_slave_0 added [ 81.685110][ T5863] team0: Port device team_slave_1 added [ 81.741589][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.775394][ T5856] team0: Port device team_slave_0 added [ 81.794629][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.814555][ T5852] team0: Port device team_slave_0 added [ 81.833647][ T5848] hsr_slave_0: entered promiscuous mode [ 81.841480][ T5848] hsr_slave_1: entered promiscuous mode [ 81.850133][ T5856] team0: Port device team_slave_1 added [ 81.857261][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.864238][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.890628][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.911517][ T5852] team0: Port device team_slave_1 added [ 81.947032][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.953999][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.980820][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.994786][ T5859] team0: Port device team_slave_0 added [ 82.021705][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.029073][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.055344][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.068528][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.075490][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.101804][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.120349][ T5859] team0: Port device team_slave_1 added [ 82.136228][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.143284][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.169581][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.177262][ T5855] Bluetooth: hci0: command tx timeout [ 82.182372][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.192594][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.218711][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.246169][ T5855] Bluetooth: hci2: command tx timeout [ 82.256242][ T5855] Bluetooth: hci1: command tx timeout [ 82.270002][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.277279][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.303717][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.326351][ T5855] Bluetooth: hci3: command tx timeout [ 82.353007][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.360059][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.386354][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.416248][ T5855] Bluetooth: hci4: command tx timeout [ 82.419160][ T5863] hsr_slave_0: entered promiscuous mode [ 82.428448][ T5863] hsr_slave_1: entered promiscuous mode [ 82.434571][ T5863] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.442439][ T5863] Cannot create hsr debugfs directory [ 82.491645][ T5852] hsr_slave_0: entered promiscuous mode [ 82.498557][ T5852] hsr_slave_1: entered promiscuous mode [ 82.504700][ T5852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.512923][ T5852] Cannot create hsr debugfs directory [ 82.555153][ T5856] hsr_slave_0: entered promiscuous mode [ 82.562534][ T5856] hsr_slave_1: entered promiscuous mode [ 82.568948][ T5856] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.577109][ T5856] Cannot create hsr debugfs directory [ 82.595800][ T5859] hsr_slave_0: entered promiscuous mode [ 82.602389][ T5859] hsr_slave_1: entered promiscuous mode [ 82.609132][ T5859] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.616831][ T5859] Cannot create hsr debugfs directory [ 82.930555][ T5848] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.943921][ T5848] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.958777][ T5848] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.977535][ T5848] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.014859][ T5856] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.026876][ T5856] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.052098][ T5856] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.074260][ T5856] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.105588][ T5863] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.129684][ T5863] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.141312][ T5863] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.159136][ T5863] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.219420][ T5852] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.258398][ T5852] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.292151][ T5852] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.326813][ T5852] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.335717][ T5859] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.354317][ T5859] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.364598][ T5859] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.381081][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.389067][ T5859] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.442661][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.478663][ T29] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.486004][ T29] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.510154][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.532577][ T29] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.539716][ T29] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.559754][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.604373][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.614140][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.661783][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.668912][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.682749][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.689869][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.707588][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.714669][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.755761][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.762893][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.834721][ T5863] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 83.845561][ T5863] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.882814][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.908680][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.942148][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.021043][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.028267][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.080060][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.128425][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.135584][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.158007][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.165117][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.184405][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.191598][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.251211][ T5855] Bluetooth: hci0: command tx timeout [ 84.280783][ T5859] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.327743][ T5855] Bluetooth: hci1: command tx timeout [ 84.332154][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.333177][ T5855] Bluetooth: hci2: command tx timeout [ 84.374532][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.408014][ T5855] Bluetooth: hci3: command tx timeout [ 84.462927][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.488058][ T5855] Bluetooth: hci4: command tx timeout [ 84.573951][ T5848] veth0_vlan: entered promiscuous mode [ 84.602856][ T5863] veth0_vlan: entered promiscuous mode [ 84.629584][ T5848] veth1_vlan: entered promiscuous mode [ 84.641634][ T5863] veth1_vlan: entered promiscuous mode [ 84.665823][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.719667][ T5848] veth0_macvtap: entered promiscuous mode [ 84.737361][ T5848] veth1_macvtap: entered promiscuous mode [ 84.803340][ T5863] veth0_macvtap: entered promiscuous mode [ 84.847887][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.868157][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.882582][ T5863] veth1_macvtap: entered promiscuous mode [ 84.897677][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.919212][ T5859] veth0_vlan: entered promiscuous mode [ 84.930748][ T5848] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.940623][ T5848] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.949752][ T5848] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.958639][ T5848] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.978686][ T5859] veth1_vlan: entered promiscuous mode [ 85.029719][ T5863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.042172][ T5863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.054358][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.101056][ T5856] veth0_vlan: entered promiscuous mode [ 85.110733][ T5859] veth0_macvtap: entered promiscuous mode [ 85.119372][ T5863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.133504][ T5863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.144524][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.195450][ T5856] veth1_vlan: entered promiscuous mode [ 85.202596][ T5859] veth1_macvtap: entered promiscuous mode [ 85.212517][ T5863] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.223563][ T5863] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.235574][ T5863] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.244601][ T5863] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.283579][ T1004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.300234][ T1004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.300363][ T5852] veth0_vlan: entered promiscuous mode [ 85.365110][ T1004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.378166][ T1004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.400892][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.412800][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.422932][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.433716][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.445041][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.469413][ T5852] veth1_vlan: entered promiscuous mode [ 85.493898][ T5852] veth0_macvtap: entered promiscuous mode [ 85.506815][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.518148][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.528652][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.539569][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.551591][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.574945][ T5852] veth1_macvtap: entered promiscuous mode [ 85.590035][ T5859] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.597216][ T5848] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 85.609743][ T5859] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.622404][ T5859] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.631570][ T5859] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.651399][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.665116][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.667962][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.690816][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.702013][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.712781][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.723048][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.733591][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.750870][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.785130][ T5856] veth0_macvtap: entered promiscuous mode [ 85.803649][ T5856] veth1_macvtap: entered promiscuous mode [ 85.839898][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.851503][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.862246][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.872986][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.883080][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.916103][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.928547][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.942956][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.971074][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.997603][ T5852] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.021324][ T5852] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.046229][ T5852] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.054964][ T5852] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.129080][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.149674][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.165563][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.178568][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.188863][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.199954][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.210127][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.222032][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.243673][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.316699][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.327102][ T5855] Bluetooth: hci0: command tx timeout [ 86.355014][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.380767][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.404111][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.406823][ T5855] Bluetooth: hci2: command tx timeout [ 86.414562][ T5853] Bluetooth: hci1: command tx timeout [ 86.420763][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.435507][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.445382][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.457656][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.470117][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.486777][ T5853] Bluetooth: hci3: command tx timeout [ 86.525326][ T1004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.535154][ T5856] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.544363][ T1004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.564508][ T5856] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.574178][ T5853] Bluetooth: hci4: command tx timeout [ 86.610318][ T5856] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.619687][ T5856] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.771224][ T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.784921][ T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.826434][ T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.834307][ T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.871530][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.880259][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.008381][ T1004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.017735][ T5938] loop0: detected capacity change from 0 to 32768 [ 87.043248][ T1004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.058992][ T5938] XFS: noikeep mount option is deprecated. [ 87.173285][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.211168][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.364308][ T5938] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 87.730150][ T5967] loop3: detected capacity change from 0 to 2048 [ 87.737653][ T5967] ======================================================= [ 87.737653][ T5967] WARNING: The mand mount option has been deprecated and [ 87.737653][ T5967] and is ignored by this kernel. Remove the mand [ 87.737653][ T5967] option from the mount to silence this warning. [ 87.737653][ T5967] ======================================================= [ 87.777944][ T5967] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=18576, location=18576 [ 87.840635][ T5938] XFS (loop0): Ending clean mount [ 87.869007][ T5967] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 87.882985][ T5938] XFS (loop0): Quotacheck needed: Please wait. [ 87.962331][ T5938] XFS (loop0): Quotacheck: Done. [ 88.116859][ T5859] UDF-fs: warning (device loop3): udf_evict_inode: Inode 1367 (mode 100000) has inode size 4102 different from extent length 4608. Filesystem need not be standards compliant. [ 88.236662][ T5848] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 88.250833][ T5979] binder: BINDER_SET_CONTEXT_MGR already set [ 88.300767][ T5979] binder: 5978:5979 ioctl 4018620d 200002c0 returned -16 [ 88.366698][ T5898] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 88.408873][ T5853] Bluetooth: hci0: command tx timeout [ 88.468060][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 88.490271][ T5853] Bluetooth: hci2: command tx timeout [ 88.496328][ T5853] Bluetooth: hci1: command tx timeout [ 88.561837][ T5898] usb 2-1: Using ep0 maxpacket: 16 [ 88.576708][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.585597][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.686574][ T5855] Bluetooth: hci3: command tx timeout [ 88.693243][ T5855] Bluetooth: hci4: command tx timeout [ 88.712159][ T5898] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.771583][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 88.836867][ T5898] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 88.851099][ T5898] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 88.875153][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 88.887036][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 88.968223][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.079852][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 89.181826][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 89.283635][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 89.832056][ T5898] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 89.880203][ T5898] usb 2-1: Manufacturer: syz [ 90.567893][ T5898] usb 2-1: config 0 descriptor?? [ 90.627754][ T5987] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17'. [ 91.750819][ T6003] dccp_invalid_packet: pskb_may_pull failed [ 91.752996][ T5998] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.774898][ T5936] usb 2-1: USB disconnect, device number 2 [ 91.836306][ T5898] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 91.849260][ T6007] Cannot find set identified by id 0 to match [ 92.099720][ T6011] loop0: detected capacity change from 0 to 2048 [ 92.145049][ T6011] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=18576, location=18576 [ 92.196167][ T5898] usb 3-1: Using ep0 maxpacket: 16 [ 92.203511][ T5898] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 92.215793][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 92.239307][ T5898] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 92.260601][ T6011] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 92.275894][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.302356][ T5898] usb 3-1: Product: syz [ 92.338488][ T5898] usb 3-1: Manufacturer: syz [ 92.372903][ T5898] usb 3-1: SerialNumber: syz [ 92.395664][ T5848] UDF-fs: warning (device loop0): udf_evict_inode: Inode 1367 (mode 100000) has inode size 4102 different from extent length 4608. Filesystem need not be standards compliant. [ 92.418381][ T1203] cfg80211: failed to load regulatory.db [ 92.476318][ T5898] usb 3-1: config 0 descriptor?? [ 92.551567][ T6020] Zero length message leads to an empty skb [ 92.571254][ T5898] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 92.649072][ T6021] loop3: detected capacity change from 0 to 22 [ 92.658150][ T6021] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 92.722407][ T6021] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 93.328393][ T5898] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 93.543920][ T5898] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 93.553978][ T5898] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 93.741683][ T6029] loop3: detected capacity change from 0 to 256 [ 94.594524][ T5898] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 94.604367][ T5898] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 95.289884][ T1203] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 95.716220][ T5898] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 95.795476][ T5898] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 95.802030][ T1203] usb 4-1: Using ep0 maxpacket: 16 [ 95.867056][ T1203] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.880536][ T1203] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 95.891951][ T1203] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 95.910456][ T1203] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 95.962680][ T1203] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 95.973228][ T1203] usb 4-1: Manufacturer: syz [ 95.986463][ T5898] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 96.017580][ T1203] usb 4-1: config 0 descriptor?? [ 96.107941][ T5898] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 96.113424][ T6042] xt_hashlimit: size too large, truncated to 1048576 [ 96.131682][ T6043] capability: warning: `syz.4.35' uses deprecated v2 capabilities in a way that may be insecure [ 96.169465][ T6043] ucma_write: process 22 (syz.4.35) changed security contexts after opening file descriptor, this is not allowed. [ 96.178374][ T5898] usb 3-1: USB disconnect, device number 2 [ 96.765994][ T6050] loop3: detected capacity change from 0 to 8 [ 96.801961][ T6052] loop4: detected capacity change from 0 to 2048 [ 96.810563][ T6052] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=18576, location=18576 [ 97.141476][ T6054] VFS: could not find a valid V7 on nullb0. [ 97.924485][ T6050] SQUASHFS error: Failed to initialise xz decompressor [ 97.947806][ T6050] squashfs image failed sanity check [ 98.079415][ T5898] usb 4-1: USB disconnect, device number 2 [ 98.251792][ T6052] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 99.190367][ T6065] loop4: detected capacity change from 0 to 22 [ 99.197730][ T6065] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 99.321539][ T6065] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 101.024069][ T6081] loop3: detected capacity change from 0 to 2048 [ 101.137955][ T6081] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 101.164692][ T6081] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 101.370652][ T6089] loop4: detected capacity change from 0 to 2048 [ 101.411435][ T6089] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=18576, location=18576 [ 101.446673][ T5859] UDF-fs: warning (device loop3): udf_evict_inode: Inode 1367 (mode 100000) has inode size 4102 different from extent length 4608. Filesystem need not be standards compliant. [ 101.579835][ T5859] UDF-fs: warning (device loop3): udf_evict_inode: Inode 1386 (mode 120777) has inode size 302 different from extent length 512. Filesystem need not be standards compliant. [ 101.681418][ T6089] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 102.691352][ T6107] loop2: detected capacity change from 0 to 512 [ 102.824748][ T6107] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.843758][ T6107] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.882155][ T6107] EXT4-fs error (device loop2): ext4_empty_dir:3084: inode #12: comm syz.2.58: invalid size [ 102.947326][ T5863] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.056716][ T6112] loop4: detected capacity change from 0 to 22 [ 103.066568][ T6112] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 103.098202][ T6112] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 103.991139][ T1203] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 104.546211][ T1203] usb 1-1: Using ep0 maxpacket: 8 [ 104.560985][ T1203] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 104.570151][ T1203] usb 1-1: config 0 has no interface number 0 [ 104.581939][ T1203] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 105.133477][ T1203] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 105.142641][ T1203] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.153519][ T1203] usb 1-1: config 0 descriptor?? [ 105.172571][ T1203] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 105.450924][ T875] usb 1-1: USB disconnect, device number 2 [ 105.569719][ T6136] loop3: detected capacity change from 0 to 2048 [ 105.702465][ T6136] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=18576, location=18576 [ 106.340498][ T6138] orangefs_mount: mount request failed with -4 [ 106.383120][ T6136] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 106.584386][ T6143] loop4: detected capacity change from 0 to 128 [ 106.633894][ T6143] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 106.766206][ T6143] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 106.811136][ T6127] loop1: detected capacity change from 0 to 32768 [ 106.839929][ T6127] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.63 (6127) [ 106.945897][ T5856] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 107.049765][ T6133] loop2: detected capacity change from 0 to 32768 [ 107.121978][ T6127] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 107.141349][ T6127] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 107.200557][ T6152] loop0: detected capacity change from 0 to 22 [ 107.210213][ T6152] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 107.228423][ T6152] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 107.648951][ T6133] JBD2: Ignoring recovery information on journal [ 107.673372][ T6127] BTRFS info (device loop1): using free-space-tree [ 107.871331][ T6127] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 107.873295][ T6127] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 108.089502][ T6160] loop4: detected capacity change from 0 to 256 [ 108.861430][ T6127] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 108.861694][ T6127] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 108.871250][ T6127] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 108.880962][ T6127] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 108.890943][ T6127] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 108.896698][ T6133] JBD2: journal reset failed [ 108.900713][ T6127] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 108.914163][ T6133] (syz.2.65,6133,0):ocfs2_journal_load:1145 ERROR: Failed to load journal! [ 108.914581][ T6127] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 108.933037][ T6127] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 108.962829][ T6160] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x73fca6c6, utbl_chksum : 0xe619d30d) [ 108.965836][ T6133] (syz.2.65,6133,0):ocfs2_check_volume:2423 ERROR: ocfs2 journal load failed! -4 [ 108.978327][ T6127] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 108.994884][ T6127] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 109.239281][ T6127] BTRFS error (device loop1): open_ctree failed [ 109.426352][ T6180] ecryptfs_parse_options: eCryptfs: unrecognized option [&@] [ 109.434002][ T6180] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 109.447543][ T6180] Error parsing options; rc = [-22] [ 110.426316][ T5898] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 110.590217][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.616997][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.642514][ T5898] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 110.671829][ T5898] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 110.700930][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.749528][ T5898] usb 1-1: config 0 descriptor?? [ 112.000995][ T5898] plantronics 0003:047F:FFFF.0001: ignoring exceeding usage max [ 112.013001][ T5898] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 112.030335][ T5898] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 112.131252][ T6207] random: crng reseeded on system resumption [ 112.446224][ T875] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 112.571587][ T6216] loop1: detected capacity change from 0 to 64 [ 112.626192][ T875] usb 5-1: Using ep0 maxpacket: 8 [ 112.635818][ T875] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 112.640049][ T6216] hfs: request for non-existent node 237 in B*Tree [ 112.647599][ T875] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 112.659565][ T6216] hfs: request for non-existent node 237 in B*Tree [ 112.685560][ T6217] hfs: request for non-existent node 237 in B*Tree [ 112.686149][ T875] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 112.700232][ T6217] hfs: request for non-existent node 237 in B*Tree [ 112.718598][ T6217] hfs: request for non-existent node 237 in B*Tree [ 112.725409][ T6217] hfs: request for non-existent node 237 in B*Tree [ 112.727069][ T875] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 112.766149][ T875] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 112.775344][ T875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.829002][ T12] hfs: request for non-existent node 237 in B*Tree [ 112.845349][ T12] hfs: request for non-existent node 237 in B*Tree [ 113.012616][ T875] usb 5-1: usb_control_msg returned -32 [ 113.091413][ T875] usbtmc 5-1:16.0: can't read capabilities [ 113.289140][ T6224] program syz.1.86 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 113.299111][ T6224] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 113.310963][ T6224] ubi0: attaching mtd0 [ 113.325250][ T6224] ubi0: scanning is finished [ 113.330155][ T6224] ubi0: empty MTD device detected [ 113.483340][ T875] usb 5-1: USB disconnect, device number 2 [ 113.838494][ T6224] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 114.873175][ T6234] loop1: detected capacity change from 0 to 2048 [ 114.931834][ T5936] usb 1-1: USB disconnect, device number 3 [ 114.985162][ T6234] NILFS (loop1): invalid segment: Magic number mismatch [ 115.030857][ T6234] NILFS (loop1): trying rollback from an earlier position [ 115.073348][ T6234] NILFS (loop1): recovery complete [ 115.083797][ T6238] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 115.494504][ T6222] loop3: detected capacity change from 0 to 32768 [ 115.874107][ T6222] JBD2: Ignoring recovery information on journal [ 116.211005][ T6222] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 117.283193][ T5859] ocfs2: Unmounting device (7,3) on (node local) [ 117.837662][ T6269] loop1: detected capacity change from 0 to 4096 [ 118.101284][ T6269] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 118.256109][ T875] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 118.408111][ T875] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 118.432268][ T875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.497119][ T875] usb 4-1: config 0 descriptor?? [ 118.518874][ T875] gspca_main: spca508-2.14.0 probing 8086:0110 [ 118.676313][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 118.728569][ T875] gspca_spca508: reg_read err -32 [ 118.836165][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 118.850627][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 118.872679][ T9] usb 5-1: config 0 has no interface number 0 [ 118.901281][ T9] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 118.911614][ T9] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 118.921692][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.941340][ T875] gspca_spca508: reg_read err -71 [ 118.951465][ T875] gspca_spca508: reg_read err -71 [ 118.957670][ T875] gspca_spca508: reg_read err -71 [ 118.965960][ T875] gspca_spca508: reg write: error -71 [ 118.977019][ T875] spca508 4-1:0.0: probe with driver spca508 failed with error -71 [ 118.987897][ T9] usb 5-1: config 0 descriptor?? [ 118.995957][ T875] usb 4-1: USB disconnect, device number 3 [ 119.024321][ T9] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 119.258802][ T9] usb 5-1: USB disconnect, device number 3 [ 119.419250][ T6288] infiniband syz2: set active [ 119.424254][ T6288] infiniband syz2: added team_slave_1 [ 119.473412][ T6288] RDS/IB: syz2: added [ 119.478227][ T6288] smc: adding ib device syz2 with port count 1 [ 119.484641][ T6288] smc: ib device syz2 port 1 has pnetid [ 119.640690][ T6291] loop1: detected capacity change from 0 to 128 [ 119.785832][ T6291] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 119.837934][ T6291] ext4 filesystem being mounted at /18/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 120.250621][ T5852] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 120.387793][ T6299] syz.4.111 uses obsolete (PF_INET,SOCK_PACKET) [ 121.115072][ T9] kernel write not supported for file /snd/seq (pid: 9 comm: kworker/0:1) [ 122.108630][ T6328] loop3: detected capacity change from 0 to 256 [ 122.243714][ T6325] loop1: detected capacity change from 0 to 4096 [ 122.501224][ T6332] loop3: detected capacity change from 0 to 128 [ 122.793899][ T6332] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 122.835760][ T30] audit: type=1800 audit(1730413107.000:2): pid=6336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.119" name="bus" dev="loop1" ino=0 res=0 errno=0 [ 123.141627][ T6332] ext4 filesystem being mounted at /24/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 123.160084][ T30] audit: type=1800 audit(1730413107.110:3): pid=6325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.119" name="bus" dev="loop1" ino=0 res=0 errno=0 [ 123.340608][ T5859] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 123.360953][ T6343] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 123.461764][ T6346] loop3: detected capacity change from 0 to 256 [ 123.492349][ T6346] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 124.457256][ T6354] loop4: detected capacity change from 0 to 4096 [ 124.618315][ T6356] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 126.747391][ T6375] loop1: detected capacity change from 0 to 4096 [ 126.785397][ T5898] hid-generic 0000:1000000:0000.0002: unknown main item tag 0x0 [ 126.826552][ T5898] hid-generic 0000:1000000:0000.0002: unknown main item tag 0x0 [ 126.854497][ T5898] hid-generic 0000:1000000:0000.0002: unknown main item tag 0x0 [ 126.882617][ T6384] loop4: detected capacity change from 0 to 256 [ 126.889318][ T5898] hid-generic 0000:1000000:0000.0002: unknown main item tag 0x0 [ 126.897490][ T30] audit: type=1800 audit(1730413111.100:4): pid=6375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.134" name="bus" dev="loop1" ino=0 res=0 errno=0 [ 126.918484][ T5898] hid-generic 0000:1000000:0000.0002: unknown main item tag 0x0 [ 126.963894][ T5898] hid-generic 0000:1000000:0000.0002: unknown main item tag 0x0 [ 127.028613][ T30] audit: type=1800 audit(1730413111.110:5): pid=6375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.134" name="bus" dev="loop1" ino=0 res=0 errno=0 [ 127.064047][ T5898] hid-generic 0000:1000000:0000.0002: unknown main item tag 0x0 [ 127.231606][ T5898] hid-generic 0000:1000000:0000.0002: unknown main item tag 0x0 [ 127.389429][ T5898] hid-generic 0000:1000000:0000.0002: unknown main item tag 0x0 [ 127.512027][ T5898] hid-generic 0000:1000000:0000.0002: unknown main item tag 0x0 [ 127.641844][ T30] audit: type=1800 audit(1730413111.850:6): pid=6384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.135" name="bus" dev="loop4" ino=1048601 res=0 errno=0 [ 127.679402][ T5898] hid-generic 0000:1000000:0000.0002: unknown main item tag 0x0 [ 127.736221][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 127.736234][ T5898] hid-generic 0000:1000000:0000.0002: unknown main item tag 0x0 [ 127.798555][ T5898] hid-generic 0000:1000000:0000.0002: unknown main item tag 0x0 [ 127.829490][ T6394] loop0: detected capacity change from 0 to 128 [ 127.834500][ T5898] hid-generic 0000:1000000:0000.0002: unknown main item tag 0x0 [ 127.863020][ T6394] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 127.876642][ T5898] hid-generic 0000:1000000:0000.0002: unknown main item tag 0x0 [ 127.889838][ T6396] loop1: detected capacity change from 0 to 64 [ 127.904886][ T9] usb 4-1: config 0 has no interfaces? [ 127.912007][ T9] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 127.914067][ T5898] hid-generic 0000:1000000:0000.0002: unknown main item tag 0x0 [ 127.937251][ T6394] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.956075][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.970418][ T5898] hid-generic 0000:1000000:0000.0002: unknown main item tag 0x0 [ 127.982949][ T9] usb 4-1: config 0 descriptor?? [ 127.996411][ T5898] hid-generic 0000:1000000:0000.0002: unknown main item tag 0x0 [ 128.014290][ T5898] hid-generic 0000:1000000:0000.0002: unknown main item tag 0x0 [ 128.029546][ T6396] hfs: request for non-existent node 237 in B*Tree [ 128.036095][ T5898] hid-generic 0000:1000000:0000.0002: unknown main item tag 0x0 [ 128.036131][ T5898] hid-generic 0000:1000000:0000.0002: unknown main item tag 0x0 [ 128.056768][ T5898] hid-generic 0000:1000000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 128.082937][ T5848] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 128.095590][ T6396] hfs: request for non-existent node 237 in B*Tree [ 128.120239][ T6396] hfs: request for non-existent node 237 in B*Tree [ 128.130638][ T6396] hfs: request for non-existent node 237 in B*Tree [ 128.167082][ T6396] hfs: request for non-existent node 237 in B*Tree [ 128.185427][ T6396] hfs: request for non-existent node 237 in B*Tree [ 128.208769][ T6399] hfs: request for non-existent node 237 in B*Tree [ 128.227459][ T6380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.246468][ T6399] hfs: request for non-existent node 237 in B*Tree [ 128.263694][ T6380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.770954][ T6408] netlink: 'syz.1.143': attribute type 4 has an invalid length. [ 131.115546][ T6389] usb 4-1: USB disconnect, device number 4 [ 131.318556][ T6436] netlink: 'syz.2.154': attribute type 4 has an invalid length. [ 131.403367][ T6440] loop4: detected capacity change from 0 to 64 [ 131.490253][ T6440] hfs: request for non-existent node 237 in B*Tree [ 131.522707][ T6440] hfs: request for non-existent node 237 in B*Tree [ 131.552503][ T6440] hfs: request for non-existent node 237 in B*Tree [ 131.575979][ T6440] hfs: request for non-existent node 237 in B*Tree [ 131.639756][ T6440] hfs: request for non-existent node 237 in B*Tree [ 131.646696][ T6440] hfs: request for non-existent node 237 in B*Tree [ 132.914013][ T5898] hid-generic 0000:1000000:0000.0003: unknown main item tag 0x0 [ 132.923643][ T5898] hid-generic 0000:1000000:0000.0003: unknown main item tag 0x0 [ 132.945465][ T5898] hid-generic 0000:1000000:0000.0003: unknown main item tag 0x0 [ 133.154809][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.164315][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.318155][ T6389] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 133.514446][ T5898] hid-generic 0000:1000000:0000.0003: unknown main item tag 0x0 [ 133.525497][ T5898] hid-generic 0000:1000000:0000.0003: unknown main item tag 0x0 [ 133.556832][ T5898] hid-generic 0000:1000000:0000.0003: unknown main item tag 0x0 [ 133.565389][ T5898] hid-generic 0000:1000000:0000.0003: unknown main item tag 0x0 [ 133.580091][ T5898] hid-generic 0000:1000000:0000.0003: unknown main item tag 0x0 [ 133.591628][ T5898] hid-generic 0000:1000000:0000.0003: unknown main item tag 0x0 [ 133.604330][ T5898] hid-generic 0000:1000000:0000.0003: unknown main item tag 0x0 [ 133.631586][ T5898] hid-generic 0000:1000000:0000.0003: unknown main item tag 0x0 [ 133.646263][ T5898] hid-generic 0000:1000000:0000.0003: unknown main item tag 0x0 [ 133.666251][ T6389] usb 3-1: config 0 has no interfaces? [ 133.671787][ T6389] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 133.676203][ T875] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 133.686142][ T5898] hid-generic 0000:1000000:0000.0003: unknown main item tag 0x0 [ 133.698813][ T6389] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.716617][ T5898] hid-generic 0000:1000000:0000.0003: unknown main item tag 0x0 [ 133.737338][ T6389] usb 3-1: config 0 descriptor?? [ 133.754394][ T5898] hid-generic 0000:1000000:0000.0003: unknown main item tag 0x0 [ 133.774191][ T5898] hid-generic 0000:1000000:0000.0003: unknown main item tag 0x0 [ 133.798193][ T5898] hid-generic 0000:1000000:0000.0003: unknown main item tag 0x0 [ 133.920093][ T875] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 133.991803][ T875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.078995][ T6462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.313062][ T6462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.326787][ T875] usb 2-1: config 0 descriptor?? [ 134.336319][ T875] gspca_main: spca508-2.14.0 probing 8086:0110 [ 134.361355][ T5936] usb 3-1: USB disconnect, device number 3 [ 134.556144][ T875] gspca_spca508: reg_read err -32 [ 134.579718][ T875] gspca_spca508: reg_read err -71 [ 134.599582][ T875] gspca_spca508: reg_read err -71 [ 134.617984][ T875] gspca_spca508: reg_read err -71 [ 134.636195][ T875] gspca_spca508: reg_read err -71 [ 134.643985][ T875] gspca_spca508: reg write: error -71 [ 134.650397][ T5898] hid-generic 0000:1000000:0000.0003: unknown main item tag 0x0 [ 134.650434][ T5898] hid-generic 0000:1000000:0000.0003: unknown main item tag 0x0 [ 134.650465][ T5898] hid-generic 0000:1000000:0000.0003: unknown main item tag 0x0 [ 134.650494][ T5898] hid-generic 0000:1000000:0000.0003: unknown main item tag 0x0 [ 134.682788][ T5898] hid-generic 0000:1000000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 134.762440][ T6475] loop4: detected capacity change from 0 to 512 [ 134.780602][ T875] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 134.806818][ T6475] EXT4-fs: inline encryption not supported [ 134.826156][ T5936] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 134.837836][ T875] usb 2-1: USB disconnect, device number 3 [ 134.871207][ T6475] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.926549][ T6475] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.960308][ T6475] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #2: comm syz.4.168: corrupted inode contents [ 134.984069][ T6475] EXT4-fs error (device loop4): ext4_dirty_inode:5984: inode #2: comm syz.4.168: mark_inode_dirty error [ 134.995603][ T5936] usb 4-1: Using ep0 maxpacket: 32 [ 135.004622][ T5936] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 135.013751][ T5936] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 135.026657][ T6475] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #2: comm syz.4.168: corrupted inode contents [ 135.039017][ T5936] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.052012][ T5936] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 135.062960][ T5936] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 135.064154][ T6475] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.168: mark_inode_dirty error [ 135.072720][ T5936] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 135.072764][ T5936] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 135.072790][ T5936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.171959][ T5936] usb 4-1: config 0 descriptor?? [ 135.178598][ T5856] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.408446][ T6473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.445119][ T6473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.463217][ T6487] loop2: detected capacity change from 0 to 2048 [ 136.282229][ T5896] usb 4-1: USB disconnect, device number 5 [ 136.403621][ T6497] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 136.420992][ T30] audit: type=1804 audit(1730413120.620:7): pid=6487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.171" name="/newroot/29/file0/file2" dev="loop2" ino=16 res=1 errno=0 [ 136.484655][ T6487] NILFS (loop2): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3) [ 136.516680][ T6487] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=16) [ 136.546323][ T6487] Remounting filesystem read-only [ 136.601128][ T6487] syz.2.171 (6487) used greatest stack depth: 18104 bytes left [ 136.635037][ T5863] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 136.878084][ T6509] block device autoloading is deprecated and will be removed. [ 136.886967][ T6509] syz.2.179: attempt to access beyond end of device [ 136.886967][ T6509] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 136.901242][ T5896] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 136.920370][ T6509] loop2: detected capacity change from 0 to 64 [ 136.966258][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 137.076861][ T5896] usb 4-1: Using ep0 maxpacket: 16 [ 137.084060][ T5896] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.094983][ T5896] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 157 [ 137.136372][ T5896] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 137.164000][ T5896] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 137.174488][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.194278][ T6389] hid-generic 0000:1000000:0000.0004: unknown main item tag 0x0 [ 137.216983][ T5896] usb 4-1: Product: syz [ 137.221204][ T5896] usb 4-1: Manufacturer: syz [ 137.233856][ T6389] hid-generic 0000:1000000:0000.0004: unknown main item tag 0x0 [ 137.237977][ T6505] loop0: detected capacity change from 0 to 40427 [ 137.242604][ T5896] usb 4-1: SerialNumber: syz [ 137.265833][ T6389] hid-generic 0000:1000000:0000.0004: unknown main item tag 0x0 [ 137.274758][ T6389] hid-generic 0000:1000000:0000.0004: unknown main item tag 0x0 [ 137.294326][ T6505] F2FS-fs (loop0): Found nat_bits in checkpoint [ 137.298005][ T5896] usb 4-1: config 0 descriptor?? [ 137.319474][ T6389] hid-generic 0000:1000000:0000.0004: unknown main item tag 0x0 [ 137.334546][ T6389] hid-generic 0000:1000000:0000.0004: unknown main item tag 0x0 [ 137.338175][ T9] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 137.352208][ T6389] hid-generic 0000:1000000:0000.0004: unknown main item tag 0x0 [ 137.356137][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.360907][ T6389] hid-generic 0000:1000000:0000.0004: unknown main item tag 0x0 [ 137.403666][ T6389] hid-generic 0000:1000000:0000.0004: unknown main item tag 0x0 [ 137.414650][ T9] usb 2-1: config 0 descriptor?? [ 137.429983][ T9] gspca_main: spca508-2.14.0 probing 8086:0110 [ 137.437768][ T6389] hid-generic 0000:1000000:0000.0004: unknown main item tag 0x0 [ 137.458557][ T6389] hid-generic 0000:1000000:0000.0004: unknown main item tag 0x0 [ 137.471753][ T6389] hid-generic 0000:1000000:0000.0004: unknown main item tag 0x0 [ 137.485245][ T6505] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 137.485857][ T6389] hid-generic 0000:1000000:0000.0004: unknown main item tag 0x0 [ 137.503037][ T6389] hid-generic 0000:1000000:0000.0004: unknown main item tag 0x0 [ 137.517491][ T6389] hid-generic 0000:1000000:0000.0004: unknown main item tag 0x0 [ 137.525667][ T6389] hid-generic 0000:1000000:0000.0004: unknown main item tag 0x0 [ 137.547272][ T5896] port100 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 137.563688][ T6389] hid-generic 0000:1000000:0000.0004: unknown main item tag 0x0 [ 137.581107][ T5848] syz-executor: attempt to access beyond end of device [ 137.581107][ T5848] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 137.587343][ T5896] usb 4-1: USB disconnect, device number 6 [ 137.602035][ T5898] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 137.610734][ T6389] hid-generic 0000:1000000:0000.0004: unknown main item tag 0x0 [ 137.626910][ T5848] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 137.635133][ T9] gspca_spca508: reg_read err -32 [ 137.650370][ T6389] hid-generic 0000:1000000:0000.0004: unknown main item tag 0x0 [ 137.662281][ T6389] hid-generic 0000:1000000:0000.0004: unknown main item tag 0x0 [ 137.662518][ T9] gspca_spca508: reg_read err -71 [ 137.672168][ T6389] hid-generic 0000:1000000:0000.0004: unknown main item tag 0x0 [ 137.685587][ T6389] hid-generic 0000:1000000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 137.705824][ T9] gspca_spca508: reg_read err -71 [ 137.714542][ T9] gspca_spca508: reg_read err -71 [ 137.723539][ T9] gspca_spca508: reg_read err -71 [ 137.731809][ T9] gspca_spca508: reg write: error -71 [ 137.737846][ T9] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 137.755054][ T9] usb 2-1: USB disconnect, device number 4 [ 137.808412][ T5898] usb 3-1: config 0 has no interfaces? [ 137.813962][ T5898] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 137.841689][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.857823][ T5898] usb 3-1: config 0 descriptor?? [ 138.082462][ T6513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.093191][ T6513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.103839][ T6522] netlink: 4 bytes leftover after parsing attributes in process `syz.4.185'. [ 138.124567][ T5898] usb 3-1: USB disconnect, device number 4 [ 138.264788][ T6522] team1: Mode changed to "activebackup" [ 138.499165][ T6530] loop3: detected capacity change from 0 to 512 [ 138.508260][ T6530] EXT4-fs: Ignoring removed bh option [ 138.539622][ T6530] EXT4-fs (loop3): orphan cleanup on readonly fs [ 138.550706][ T6530] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 138.564648][ T6530] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.186: invalid indirect mapped block 8 (level 2) [ 138.581222][ T6530] EXT4-fs (loop3): Remounting filesystem read-only [ 138.588423][ T6530] EXT4-fs (loop3): 1 truncate cleaned up [ 138.595055][ T6530] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 139.232242][ T5859] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.369234][ T6528] loop1: detected capacity change from 0 to 32768 [ 139.917159][ T6528] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.187 (6528) [ 140.029189][ T6528] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 140.090406][ T6528] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 140.329422][ T6528] BTRFS info (device loop1): rebuilding free space tree [ 140.466374][ T5896] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 140.482593][ T6528] BTRFS info (device loop1): disabling free space tree [ 140.514831][ T6528] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 140.545456][ T6528] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 140.647097][ T5896] usb 4-1: Using ep0 maxpacket: 32 [ 140.665851][ T5896] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 140.691369][ T5896] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 140.725481][ T5896] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.758666][ T5896] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 140.780971][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 140.810194][ T5896] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 140.846561][ T5896] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 140.855736][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.871229][ T6566] loop4: detected capacity change from 0 to 32768 [ 140.890647][ T5896] usb 4-1: config 0 descriptor?? [ 140.910807][ T5852] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 140.939418][ T6566] BTRFS: device /dev/loop4 (7:4) using temp-fsid ebc375b2-dacd-4df1-84c4-d1623fbb0e5f [ 140.952222][ T6566] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.197 (6566) [ 141.015325][ T6566] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 141.027884][ T6566] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 141.832355][ T6566] BTRFS info (device loop4): using free-space-tree [ 141.865308][ T6565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.875882][ T6565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.943229][ T9] usb 4-1: USB disconnect, device number 7 [ 142.311948][ T6599] Cannot find set identified by id 0 to match [ 142.363999][ T6566] BTRFS info (device loop4): rebuilding free space tree [ 142.398175][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 142.606806][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 142.623053][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.628312][ T5856] BTRFS info (device loop4): last unmount of filesystem ebc375b2-dacd-4df1-84c4-d1623fbb0e5f [ 142.659671][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 157 [ 142.683765][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 142.697270][ T5936] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 142.730075][ T9] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 142.751001][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.769578][ T9] usb 4-1: Product: syz [ 142.784163][ T9] usb 4-1: Manufacturer: syz [ 142.800922][ T9] usb 4-1: SerialNumber: syz [ 142.836893][ T9] usb 4-1: config 0 descriptor?? [ 142.866417][ T5936] usb 2-1: Using ep0 maxpacket: 16 [ 142.877750][ T5936] usb 2-1: config 0 has an invalid interface number: 161 but max is 0 [ 142.891452][ T5936] usb 2-1: config 0 has no interface number 0 [ 142.908539][ T5936] usb 2-1: config 0 interface 161 has no altsetting 0 [ 142.910112][ T6389] hid-generic 0000:1000000:0000.0005: unknown main item tag 0x0 [ 142.929579][ T5936] usb 2-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 142.946414][ T5936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.949957][ T6389] hid-generic 0000:1000000:0000.0005: unknown main item tag 0x0 [ 142.965546][ T5936] usb 2-1: Product: syz [ 142.984124][ T5936] usb 2-1: Manufacturer: syz [ 142.996361][ T6389] hid-generic 0000:1000000:0000.0005: unknown main item tag 0x0 [ 143.004366][ T6389] hid-generic 0000:1000000:0000.0005: unknown main item tag 0x0 [ 143.008849][ T5936] usb 2-1: SerialNumber: syz [ 143.012217][ T6389] hid-generic 0000:1000000:0000.0005: unknown main item tag 0x0 [ 143.024843][ T6389] hid-generic 0000:1000000:0000.0005: unknown main item tag 0x0 [ 143.034222][ T6389] hid-generic 0000:1000000:0000.0005: unknown main item tag 0x0 [ 143.042255][ T6389] hid-generic 0000:1000000:0000.0005: unknown main item tag 0x0 [ 143.051579][ T6389] hid-generic 0000:1000000:0000.0005: unknown main item tag 0x0 [ 143.060004][ T6389] hid-generic 0000:1000000:0000.0005: unknown main item tag 0x0 [ 143.062390][ T9] port100 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 143.099068][ T5936] usb 2-1: config 0 descriptor?? [ 143.109683][ T5936] ums-jumpshot 2-1:0.161: USB Mass Storage device detected [ 143.120543][ T6389] hid-generic 0000:1000000:0000.0005: unknown main item tag 0x0 [ 143.138687][ T5936] ums-jumpshot 2-1:0.161: Quirks match for vid 05dc pid 0001: 2 [ 143.149444][ T9] usb 4-1: USB disconnect, device number 8 [ 143.150953][ T6389] hid-generic 0000:1000000:0000.0005: unknown main item tag 0x0 [ 143.163171][ T5896] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 143.216247][ T6389] hid-generic 0000:1000000:0000.0005: unknown main item tag 0x0 [ 143.241052][ T6389] hid-generic 0000:1000000:0000.0005: unknown main item tag 0x0 [ 143.249206][ T6389] hid-generic 0000:1000000:0000.0005: unknown main item tag 0x0 [ 143.257508][ T6389] hid-generic 0000:1000000:0000.0005: unknown main item tag 0x0 [ 143.265204][ T6389] hid-generic 0000:1000000:0000.0005: unknown main item tag 0x0 [ 143.272919][ T6389] hid-generic 0000:1000000:0000.0005: unknown main item tag 0x0 [ 143.280702][ T6389] hid-generic 0000:1000000:0000.0005: unknown main item tag 0x0 [ 143.288471][ T6389] hid-generic 0000:1000000:0000.0005: unknown main item tag 0x0 [ 143.296311][ T6389] hid-generic 0000:1000000:0000.0005: unknown main item tag 0x0 [ 143.319002][ T6389] hid-generic 0000:1000000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 143.337433][ T6600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.345989][ T6600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.639410][ T5896] usb 5-1: config 0 has no interfaces? [ 143.644965][ T5896] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 143.655383][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.671595][ T5896] usb 5-1: config 0 descriptor?? [ 143.735366][ T5853] Bluetooth: hci1: adv larger than maximum supported [ 143.735428][ T5853] Bluetooth: hci1: Malformed LE Event: 0x0d [ 143.796740][ T6623] loop2: detected capacity change from 0 to 512 [ 143.824177][ T6623] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 143.836418][ T6623] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 143.849634][ T6623] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.208: Corrupt directory, running e2fsck is recommended [ 143.897752][ T6623] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 143.913134][ T6603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.913555][ T6623] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.208: corrupted in-inode xattr: invalid ea_ino [ 143.921906][ T6603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.945486][ T6623] EXT4-fs (loop2): Remounting filesystem read-only [ 143.960037][ T6389] usb 5-1: USB disconnect, device number 4 [ 143.964392][ T6623] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.995194][ T6623] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 144.007570][ T6623] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 144.020220][ T6623] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.208: Corrupt directory, running e2fsck is recommended [ 144.035190][ T6623] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 144.047239][ T6623] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 144.057816][ T6623] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.208: Corrupt directory, running e2fsck is recommended [ 144.074282][ T6623] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 144.086277][ T6623] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 144.097230][ T6623] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.208: Corrupt directory, running e2fsck is recommended [ 144.113085][ T6623] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 144.150205][ T5863] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.367135][ T6647] loop4: detected capacity change from 0 to 256 [ 146.383930][ T5896] usb 2-1: USB disconnect, device number 5 [ 146.487379][ T6389] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 146.555644][ T30] audit: type=1800 audit(1730413130.770:8): pid=6647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.215" name="bus" dev="loop4" ino=1048602 res=0 errno=0 [ 146.576159][ C1] vkms_vblank_simulate: vblank timer overrun [ 147.523370][ T6389] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 147.570341][ T6389] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.940416][ T6389] usb 3-1: config 0 descriptor?? [ 148.356184][ T6389] usb 3-1: can't set config #0, error -71 [ 148.394502][ T6389] usb 3-1: USB disconnect, device number 5 [ 148.765697][ T6668] loop2: detected capacity change from 0 to 1024 [ 148.832439][ T6668] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.910899][ T6389] hid-generic 0000:1000000:0000.0006: unknown main item tag 0x0 [ 148.948409][ T6389] hid-generic 0000:1000000:0000.0006: unknown main item tag 0x0 [ 148.995633][ T6389] hid-generic 0000:1000000:0000.0006: unknown main item tag 0x0 [ 149.026256][ T6389] hid-generic 0000:1000000:0000.0006: unknown main item tag 0x0 [ 149.046098][ T6389] hid-generic 0000:1000000:0000.0006: unknown main item tag 0x0 [ 149.053815][ T6389] hid-generic 0000:1000000:0000.0006: unknown main item tag 0x0 [ 149.092430][ T5863] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.092624][ T6389] hid-generic 0000:1000000:0000.0006: unknown main item tag 0x0 [ 149.146706][ T6389] hid-generic 0000:1000000:0000.0006: unknown main item tag 0x0 [ 149.147008][ T6389] hid-generic 0000:1000000:0000.0006: unknown main item tag 0x0 [ 149.147041][ T6389] hid-generic 0000:1000000:0000.0006: unknown main item tag 0x0 [ 149.206095][ T6389] hid-generic 0000:1000000:0000.0006: unknown main item tag 0x0 [ 149.206131][ T6389] hid-generic 0000:1000000:0000.0006: unknown main item tag 0x0 [ 149.206177][ T6389] hid-generic 0000:1000000:0000.0006: unknown main item tag 0x0 [ 149.206206][ T6389] hid-generic 0000:1000000:0000.0006: unknown main item tag 0x0 [ 149.206236][ T6389] hid-generic 0000:1000000:0000.0006: unknown main item tag 0x0 [ 149.206265][ T6389] hid-generic 0000:1000000:0000.0006: unknown main item tag 0x0 [ 149.206295][ T6389] hid-generic 0000:1000000:0000.0006: unknown main item tag 0x0 [ 149.206331][ T6389] hid-generic 0000:1000000:0000.0006: unknown main item tag 0x0 [ 149.206361][ T6389] hid-generic 0000:1000000:0000.0006: unknown main item tag 0x0 [ 149.206397][ T6389] hid-generic 0000:1000000:0000.0006: unknown main item tag 0x0 [ 149.206425][ T6389] hid-generic 0000:1000000:0000.0006: unknown main item tag 0x0 [ 149.216274][ T6389] hid-generic 0000:1000000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz1 [ 149.256586][ T5896] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 149.492646][ T5896] usb 4-1: config 0 has no interfaces? [ 149.492686][ T5896] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 149.492714][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.496156][ T6389] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 149.517928][ T5896] usb 4-1: config 0 descriptor?? [ 149.656174][ T6389] usb 3-1: Using ep0 maxpacket: 8 [ 149.661152][ T6389] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 149.661185][ T6389] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 149.661214][ T6389] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 149.661242][ T6389] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 149.661284][ T6389] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 149.661311][ T6389] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.743559][ T6676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.743979][ T6676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.750246][ T5896] usb 4-1: USB disconnect, device number 9 [ 149.872655][ T6389] usb 3-1: GET_CAPABILITIES returned 0 [ 149.965557][ T6389] usbtmc 3-1:16.0: can't read capabilities [ 150.070359][ T875] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 150.747816][ T6389] usb 3-1: USB disconnect, device number 6 [ 150.958050][ T875] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 150.967543][ T875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.986931][ T875] usb 1-1: config 0 descriptor?? [ 151.177673][ T6706] loop1: detected capacity change from 0 to 64 [ 151.241688][ T6702] loop4: detected capacity change from 0 to 4096 [ 151.349672][ T6702] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 151.506200][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 151.656144][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 151.674050][ T9] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.688905][ T9] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.701587][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 151.710992][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.734622][ T9] hub 4-1:4.0: USB hub found [ 151.759658][ T5898] hid-generic 0000:1000000:0000.0007: unknown main item tag 0x0 [ 151.777399][ T5898] hid-generic 0000:1000000:0000.0007: unknown main item tag 0x0 [ 151.797745][ T5898] hid-generic 0000:1000000:0000.0007: unknown main item tag 0x0 [ 151.805454][ T5898] hid-generic 0000:1000000:0000.0007: unknown main item tag 0x0 [ 151.833510][ T5898] hid-generic 0000:1000000:0000.0007: unknown main item tag 0x0 [ 151.856379][ T5898] hid-generic 0000:1000000:0000.0007: unknown main item tag 0x0 [ 151.864206][ T5898] hid-generic 0000:1000000:0000.0007: unknown main item tag 0x0 [ 151.876144][ T5898] hid-generic 0000:1000000:0000.0007: unknown main item tag 0x0 [ 151.883830][ T5898] hid-generic 0000:1000000:0000.0007: unknown main item tag 0x0 [ 151.906060][ T5898] hid-generic 0000:1000000:0000.0007: unknown main item tag 0x0 [ 151.913749][ T5898] hid-generic 0000:1000000:0000.0007: unknown main item tag 0x0 [ 151.938307][ T5898] hid-generic 0000:1000000:0000.0007: unknown main item tag 0x0 [ 151.941582][ T9] hub 4-1:4.0: config failed, hub has too many ports! (err -19) [ 151.956114][ T5898] hid-generic 0000:1000000:0000.0007: unknown main item tag 0x0 [ 151.963830][ T5898] hid-generic 0000:1000000:0000.0007: unknown main item tag 0x0 [ 151.986160][ T5898] hid-generic 0000:1000000:0000.0007: unknown main item tag 0x0 [ 152.006426][ T5898] hid-generic 0000:1000000:0000.0007: unknown main item tag 0x0 [ 152.026139][ T5898] hid-generic 0000:1000000:0000.0007: unknown main item tag 0x0 [ 152.035732][ T5898] hid-generic 0000:1000000:0000.0007: unknown main item tag 0x0 [ 152.046951][ T5898] hid-generic 0000:1000000:0000.0007: unknown main item tag 0x0 [ 152.064110][ T875] pegasus 1-1:0.0: probe with driver pegasus failed with error -71 [ 152.066437][ T5898] hid-generic 0000:1000000:0000.0007: unknown main item tag 0x0 [ 152.078244][ T875] usb 1-1: USB disconnect, device number 4 [ 152.106131][ T5898] hid-generic 0000:1000000:0000.0007: unknown main item tag 0x0 [ 152.136349][ T5898] hid-generic 0000:1000000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz1 [ 152.286573][ T9] usb 4-1: USB disconnect, device number 10 [ 153.483350][ T6742] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 154.166175][ T46] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 154.193525][ T6746] Cannot find set identified by id 0 to match [ 154.656285][ T46] usb 3-1: Using ep0 maxpacket: 8 [ 154.681004][ T46] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 154.693716][ T46] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 154.706467][ T46] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 154.717624][ T46] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 154.738408][ T46] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 155.224684][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.508120][ T46] usb 3-1: GET_CAPABILITIES returned 0 [ 155.513670][ T46] usbtmc 3-1:16.0: can't read capabilities [ 155.577585][ T6736] loop3: detected capacity change from 0 to 40427 [ 155.765678][ T6736] F2FS-fs (loop3): invalid crc value [ 155.766707][ T5895] usb 3-1: USB disconnect, device number 7 [ 155.869618][ T6766] xt_hashlimit: size too large, truncated to 1048576 [ 156.819846][ T6736] F2FS-fs (loop3): Found nat_bits in checkpoint [ 157.793418][ T6785] loop4: detected capacity change from 0 to 512 [ 157.800460][ T6785] EXT4-fs: Ignoring removed bh option [ 157.812502][ T6785] EXT4-fs (loop4): orphan cleanup on readonly fs [ 157.820619][ T6785] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 157.836375][ T6785] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.266: invalid indirect mapped block 8 (level 2) [ 157.892647][ T6785] EXT4-fs (loop4): Remounting filesystem read-only [ 157.902220][ T6785] EXT4-fs (loop4): 1 truncate cleaned up [ 157.916130][ T6785] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 158.682989][ T5856] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.152070][ T9] hid-generic 0000:1000000:0000.0008: unknown main item tag 0x0 [ 161.981855][ T9] hid-generic 0000:1000000:0000.0008: unknown main item tag 0x0 [ 161.990454][ T9] hid-generic 0000:1000000:0000.0008: unknown main item tag 0x0 [ 161.999408][ T9] hid-generic 0000:1000000:0000.0008: unknown main item tag 0x0 [ 162.007222][ T9] hid-generic 0000:1000000:0000.0008: unknown main item tag 0x0 [ 162.016477][ T9] hid-generic 0000:1000000:0000.0008: unknown main item tag 0x0 [ 162.024165][ T9] hid-generic 0000:1000000:0000.0008: unknown main item tag 0x0 [ 162.032162][ T9] hid-generic 0000:1000000:0000.0008: unknown main item tag 0x0 [ 162.040185][ T9] hid-generic 0000:1000000:0000.0008: unknown main item tag 0x0 [ 162.048368][ T9] hid-generic 0000:1000000:0000.0008: unknown main item tag 0x0 [ 162.056347][ T9] hid-generic 0000:1000000:0000.0008: unknown main item tag 0x0 [ 162.064878][ T9] hid-generic 0000:1000000:0000.0008: unknown main item tag 0x0 [ 162.072798][ T9] hid-generic 0000:1000000:0000.0008: unknown main item tag 0x0 [ 162.080747][ T9] hid-generic 0000:1000000:0000.0008: unknown main item tag 0x0 [ 162.088508][ T9] hid-generic 0000:1000000:0000.0008: unknown main item tag 0x0 [ 162.097053][ T9] hid-generic 0000:1000000:0000.0008: unknown main item tag 0x0 [ 162.105585][ T9] hid-generic 0000:1000000:0000.0008: unknown main item tag 0x0 [ 162.113388][ T9] hid-generic 0000:1000000:0000.0008: unknown main item tag 0x0 [ 162.121169][ T9] hid-generic 0000:1000000:0000.0008: unknown main item tag 0x0 [ 162.128933][ T9] hid-generic 0000:1000000:0000.0008: unknown main item tag 0x0 [ 162.137413][ T9] hid-generic 0000:1000000:0000.0008: unknown main item tag 0x0 [ 162.160148][ T9] hid-generic 0000:1000000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz1 [ 163.599392][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 163.650284][ T6826] loop2: detected capacity change from 0 to 32768 [ 163.661631][ T6826] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.280 (6826) [ 163.866216][ T6826] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 163.906134][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 163.919387][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 164.864463][ T9] usb 2-1: config 0 has no interface number 0 [ 164.870709][ T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 164.880782][ T9] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 164.890204][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.899702][ T6826] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 165.212982][ T6826] BTRFS info (device loop2): disk space caching is enabled [ 165.226395][ T6826] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 165.426559][ T9] usb 2-1: config 0 descriptor?? [ 165.449184][ T6826] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 165.449512][ T6826] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 165.463237][ T9] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 165.466408][ T6826] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 165.559875][ T6852] xt_hashlimit: size too large, truncated to 1048576 [ 166.566185][ T5898] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 166.586629][ T6826] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 166.586900][ T6826] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 166.606424][ T6826] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 166.642062][ T6826] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 166.663811][ T46] usb 2-1: USB disconnect, device number 7 [ 166.736732][ T5898] usb 1-1: Using ep0 maxpacket: 32 [ 166.744466][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.756110][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.765867][ T5898] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 166.789281][ T5898] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 166.805373][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.874862][ T5898] usb 1-1: config 0 descriptor?? [ 167.027133][ T6826] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 167.029721][ T6826] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 167.063322][ T6826] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 167.987725][ T46] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 168.398014][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.411926][ T5898] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0009/input/input5 [ 168.435305][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.470123][ T46] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 168.532428][ T5898] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0009/input/input6 [ 168.551120][ T46] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 168.590433][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.632830][ T5898] kye 0003:0458:5011.0009: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 168.659625][ T46] usb 5-1: config 0 descriptor?? [ 169.032683][ T5898] usb 1-1: USB disconnect, device number 5 [ 169.109346][ T46] plantronics 0003:047F:FFFF.000A: ignoring exceeding usage max [ 169.165282][ T46] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 169.177798][ T46] plantronics 0003:047F:FFFF.000A: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 169.293607][ T46] usb 5-1: USB disconnect, device number 5 [ 169.579286][ T6826] BTRFS error (device loop2): open_ctree failed [ 170.315569][ T6886] loop3: detected capacity change from 0 to 2048 [ 170.466098][ T6886] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.045593][ T6886] EXT4-fs error (device loop3): ext4_ext_precache:648: inode #2: comm syz.3.297: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 171.151312][ T6886] EXT4-fs (loop3): Remounting filesystem read-only [ 171.273680][ T6900] Invalid ELF header len 37 [ 171.439799][ T6902] loop0: detected capacity change from 0 to 1024 [ 171.467296][ T5859] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.331681][ T6949] hfsplus: b-tree write err: -5, ino 4 [ 172.526661][ T6969] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 172.554338][ T6969] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 172.757853][ T6954] loop4: detected capacity change from 0 to 32768 [ 172.777486][ T6954] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.303 (6954) [ 172.953173][ T6973] loop3: detected capacity change from 0 to 4096 [ 172.998521][ T46] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 173.005079][ T6954] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 173.040108][ T6954] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 173.365364][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.456742][ T6954] BTRFS info (device loop4): disk space caching is enabled [ 173.527557][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.627562][ T6954] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 173.668145][ T46] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 173.747351][ T46] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 173.786513][ T6954] BTRFS info (device loop4): rebuilding free space tree [ 173.820670][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.833935][ T46] usb 1-1: config 0 descriptor?? [ 173.860875][ T6973] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 173.898843][ T6954] BTRFS info (device loop4): disabling free space tree [ 174.033488][ T6954] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 174.045525][ T6954] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 174.255827][ T46] plantronics 0003:047F:FFFF.000B: ignoring exceeding usage max [ 174.268518][ T46] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 174.843568][ T5856] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 174.859823][ T46] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 175.169954][ T46] usb 1-1: USB disconnect, device number 6 [ 175.583613][ T7018] loop3: detected capacity change from 0 to 512 [ 175.766549][ T46] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 175.856099][ T7018] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.868845][ T7018] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.927721][ T46] usb 1-1: Using ep0 maxpacket: 8 [ 175.950763][ T46] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 175.958958][ T46] usb 1-1: config 0 has no interface number 0 [ 175.982322][ T46] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 176.398274][ T46] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 176.407545][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.427727][ T46] usb 1-1: config 0 descriptor?? [ 176.452548][ T46] iowarrior 1-1:0.1: no interrupt-in endpoint found [ 176.729583][ T6389] usb 1-1: USB disconnect, device number 7 [ 177.091005][ T7036] loop2: detected capacity change from 0 to 256 [ 177.108294][ T5859] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.242892][ T7032] loop1: detected capacity change from 0 to 40427 [ 177.319826][ T7032] F2FS-fs (loop1): invalid crc value [ 177.349546][ T7032] F2FS-fs (loop1): Found nat_bits in checkpoint [ 177.365880][ T7038] loop4: detected capacity change from 0 to 4096 [ 177.375284][ T30] audit: type=1800 audit(1730413161.580:9): pid=7036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.316" name="bus" dev="loop2" ino=1048603 res=0 errno=0 [ 177.538297][ T7038] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 177.595426][ T7032] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 177.761387][ T7032] syz.1.323: attempt to access beyond end of device [ 177.761387][ T7032] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 177.860409][ T7032] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 178.844087][ T7048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.872499][ T7043] loop3: detected capacity change from 0 to 32768 [ 178.886562][ T7043] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.325 (7043) [ 178.916570][ T7043] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 178.927429][ T7043] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 178.937330][ T7043] BTRFS info (device loop3): disk space caching is enabled [ 178.944724][ T7043] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 179.205884][ T7043] BTRFS info (device loop3): rebuilding free space tree [ 179.216572][ T6389] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 179.291620][ T7043] BTRFS info (device loop3): disabling free space tree [ 179.310311][ T7043] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 179.330339][ T7043] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 179.400251][ T6389] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.431788][ T6389] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.468624][ T6389] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 179.500992][ T5859] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 179.507824][ T7075] loop2: detected capacity change from 0 to 2048 [ 179.516053][ T6389] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 179.538268][ T7075] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=18576, location=18576 [ 179.551984][ T6389] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.587678][ T7075] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 179.604768][ T6389] usb 1-1: config 0 descriptor?? [ 179.852828][ T5863] UDF-fs: warning (device loop2): udf_evict_inode: Inode 1367 (mode 100000) has inode size 4102 different from extent length 4608. Filesystem need not be standards compliant. [ 179.924797][ T7078] loop4: detected capacity change from 0 to 2048 [ 179.975741][ T7078] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 180.099683][ T6389] usbhid 1-1:0.0: can't add hid device: -71 [ 180.106429][ T6389] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 180.276869][ T7078] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 180.418609][ T7086] netlink: 40 bytes leftover after parsing attributes in process `syz.2.334'. [ 180.498173][ T5856] UDF-fs: warning (device loop4): udf_evict_inode: Inode 1367 (mode 120777) has inode size 14 different from extent length 512. Filesystem need not be standards compliant. [ 180.508913][ T6389] usb 1-1: USB disconnect, device number 8 [ 183.852039][ T7124] loop1: detected capacity change from 0 to 2048 [ 184.098743][ T7124] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 184.219603][ T7130] netlink: 40 bytes leftover after parsing attributes in process `syz.2.346'. [ 184.464287][ T7124] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 185.051314][ T7118] loop0: detected capacity change from 0 to 32768 [ 185.099910][ T7137] loop2: detected capacity change from 0 to 64 [ 185.154890][ T7118] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.343 (7118) [ 185.267916][ T7137] hfs: request for non-existent node 237 in B*Tree [ 185.274511][ T7137] hfs: request for non-existent node 237 in B*Tree [ 185.274631][ T7118] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 185.281698][ T7137] hfs: request for non-existent node 237 in B*Tree [ 185.291637][ T7118] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 185.306949][ T7118] BTRFS info (device loop0): disk space caching is enabled [ 185.314211][ T7118] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 185.315290][ T5852] UDF-fs: warning (device loop1): udf_evict_inode: Inode 1367 (mode 120777) has inode size 14 different from extent length 512. Filesystem need not be standards compliant. [ 185.357250][ T7137] hfs: request for non-existent node 237 in B*Tree [ 185.368313][ T7137] hfs: request for non-existent node 237 in B*Tree [ 185.376367][ T7137] hfs: request for non-existent node 237 in B*Tree [ 185.466145][ T5895] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 185.515508][ T7118] BTRFS info (device loop0): rebuilding free space tree [ 185.639267][ T7118] BTRFS info (device loop0): disabling free space tree [ 185.688898][ T7118] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 185.740885][ T7118] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 185.828196][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.828235][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.828260][ T5895] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 185.828318][ T5895] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 185.828345][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.830438][ T5895] usb 5-1: config 0 descriptor?? [ 185.904480][ T7164] loop3: detected capacity change from 0 to 512 [ 185.908510][ T7164] EXT4-fs: Ignoring removed bh option [ 185.961432][ T7166] ================================================================== [ 185.961452][ T7166] BUG: KASAN: slab-out-of-bounds in skb_copy_and_csum_bits+0x433/0x9c0 [ 185.961495][ T7166] Write of size 839 at addr ffff88807e06aa24 by task syz.1.354/7166 [ 185.961515][ T7166] [ 185.961540][ T7166] CPU: 1 UID: 0 PID: 7166 Comm: syz.1.354 Not tainted 6.12.0-rc5-next-20241031-syzkaller #0 [ 185.961567][ T7166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 185.961585][ T7166] Call Trace: [ 185.961594][ T7166] [ 185.961604][ T7166] dump_stack_lvl+0x241/0x360 [ 185.961643][ T7166] ? __pfx_dump_stack_lvl+0x10/0x10 [ 185.961679][ T7166] ? __pfx__printk+0x10/0x10 [ 185.961712][ T7166] ? _printk+0xd5/0x120 [ 185.961756][ T7166] ? __virt_addr_valid+0x183/0x530 [ 185.961780][ T7166] ? __virt_addr_valid+0x183/0x530 [ 185.961805][ T7166] print_report+0x169/0x550 [ 185.961827][ T7166] ? __virt_addr_valid+0x183/0x530 [ 185.961850][ T7166] ? __virt_addr_valid+0x183/0x530 [ 185.961872][ T7166] ? __virt_addr_valid+0x45f/0x530 [ 185.961895][ T7166] ? __phys_addr+0xba/0x170 [ 185.961922][ T7166] ? skb_copy_and_csum_bits+0x433/0x9c0 [ 185.961944][ T7166] kasan_report+0x143/0x180 [ 185.961967][ T7166] ? skb_copy_and_csum_bits+0x433/0x9c0 [ 185.961993][ T7166] kasan_check_range+0x282/0x290 [ 185.962014][ T7166] ? skb_copy_and_csum_bits+0x433/0x9c0 [ 185.962037][ T7166] __asan_memcpy+0x40/0x70 [ 185.962066][ T7166] skb_copy_and_csum_bits+0x433/0x9c0 [ 185.962094][ T7166] __ip_append_data+0x2fc1/0x40f0 [ 185.962133][ T7166] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 185.962172][ T7166] ? __pfx___ip_append_data+0x10/0x10 [ 185.962200][ T7166] ? lockdep_hardirqs_on+0x99/0x150 [ 185.962233][ T7166] ip_append_data+0x14c/0x190 [ 185.962260][ T7166] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 185.962288][ T7166] udp_sendmsg+0x3e2/0x2a50 [ 185.962316][ T7166] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 185.962357][ T7166] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 185.962383][ T7166] ? __pfx_udp_sendmsg+0x10/0x10 [ 185.962423][ T7166] ? __pfx_aa_sk_perm+0x10/0x10 [ 185.962452][ T7166] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 185.962504][ T7166] ? sock_rps_record_flow+0x1a/0x400 [ 185.962533][ T7166] ? inet_sendmsg+0x2ba/0x390 [ 185.962562][ T7166] __sock_sendmsg+0x1a6/0x270 [ 185.962586][ T7166] sock_sendmsg+0x134/0x200 [ 185.962610][ T7166] ? __pfx_sock_sendmsg+0x10/0x10 [ 185.962638][ T7166] ? splice_to_socket+0xae/0x10b0 [ 185.962672][ T7166] ? iov_iter_bvec+0x4e/0x180 [ 185.962702][ T7166] splice_to_socket+0xa10/0x10b0 [ 185.962747][ T7166] ? __pfx_splice_to_socket+0x10/0x10 [ 185.962804][ T7166] ? __pfx_splice_to_socket+0x10/0x10 [ 185.962838][ T7166] direct_splice_actor+0x11b/0x220 [ 185.962874][ T7166] splice_direct_to_actor+0x586/0xc80 [ 185.962916][ T7166] ? __pfx_direct_splice_actor+0x10/0x10 [ 185.962951][ T7166] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 185.962991][ T7166] do_splice_direct+0x289/0x3e0 [ 185.963028][ T7166] ? __pfx_do_splice_direct+0x10/0x10 [ 185.963062][ T7166] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 185.963086][ T7166] ? bpf_lsm_file_permission+0x9/0x10 [ 185.963124][ T7166] ? security_file_permission+0x74/0x280 [ 185.963155][ T7166] ? rw_verify_area+0x1c3/0x6f0 [ 185.963193][ T7166] do_sendfile+0x561/0xe10 [ 185.963223][ T7166] ? __pfx_do_sendfile+0x10/0x10 [ 185.963247][ T7166] ? __sys_connect+0x165/0x300 [ 185.963278][ T7166] __se_sys_sendfile64+0x17c/0x1e0 [ 185.963303][ T7166] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 185.963327][ T7166] ? do_syscall_64+0x100/0x230 [ 185.963361][ T7166] ? do_syscall_64+0xb6/0x230 [ 185.963395][ T7166] do_syscall_64+0xf3/0x230 [ 185.963427][ T7166] ? clear_bhb_loop+0x35/0x90 [ 185.963450][ T7166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.963484][ T7166] RIP: 0033:0x7fe1ac37e719 [ 185.963510][ T7166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.963529][ T7166] RSP: 002b:00007fe1aa7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 185.963559][ T7166] RAX: ffffffffffffffda RBX: 00007fe1ac536058 RCX: 00007fe1ac37e719 [ 185.963577][ T7166] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000005 [ 185.963591][ T7166] RBP: 00007fe1ac3f132e R08: 0000000000000000 R09: 0000000000000000 [ 185.963606][ T7166] R10: 0000020000023890 R11: 0000000000000246 R12: 0000000000000000 [ 185.963621][ T7166] R13: 0000000000000000 R14: 00007fe1ac536058 R15: 00007ffcd1192628 [ 185.963645][ T7166] [ 185.963654][ T7166] [ 185.963660][ T7166] Allocated by task 7166: [ 185.963671][ T7166] kasan_save_track+0x3f/0x80 [ 185.963701][ T7166] __kasan_slab_alloc+0x66/0x80 [ 185.963731][ T7166] kmem_cache_alloc_node_noprof+0x1d9/0x380 [ 185.963753][ T7166] kmalloc_reserve+0xa8/0x2a0 [ 185.963777][ T7166] __alloc_skb+0x1f3/0x440 [ 185.963800][ T7166] __ip_append_data+0x2da7/0x40f0 [ 185.963824][ T7166] ip_append_data+0x14c/0x190 [ 185.963846][ T7166] udp_sendmsg+0x3e2/0x2a50 [ 185.963869][ T7166] __sock_sendmsg+0x1a6/0x270 [ 185.963888][ T7166] sock_sendmsg+0x134/0x200 [ 185.963906][ T7166] splice_to_socket+0xa10/0x10b0 [ 185.963936][ T7166] direct_splice_actor+0x11b/0x220 [ 185.963966][ T7166] splice_direct_to_actor+0x586/0xc80 [ 185.963997][ T7166] do_splice_direct+0x289/0x3e0 [ 185.964028][ T7166] do_sendfile+0x561/0xe10 [ 185.964050][ T7166] __se_sys_sendfile64+0x17c/0x1e0 [ 185.964071][ T7166] do_syscall_64+0xf3/0x230 [ 185.964101][ T7166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.964132][ T7166] [ 185.964137][ T7166] The buggy address belongs to the object at ffff88807e06aa00 [ 185.964137][ T7166] which belongs to the cache skbuff_small_head of size 640 [ 185.964155][ T7166] The buggy address is located 36 bytes inside of [ 185.964155][ T7166] allocated 640-byte region [ffff88807e06aa00, ffff88807e06ac80) [ 185.964216][ T7166] [ 185.964222][ T7166] The buggy address belongs to the physical page: [ 185.964237][ T7166] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7e068 [ 185.964261][ T7166] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 185.964279][ T7166] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 185.964304][ T7166] page_type: f5(slab) [ 185.964325][ T7166] raw: 00fff00000000040 ffff88801ea99a00 ffffea000192eb00 dead000000000002 [ 185.964345][ T7166] raw: 0000000000000000 0000000080150015 00000001f5000000 0000000000000000 [ 185.964366][ T7166] head: 00fff00000000040 ffff88801ea99a00 ffffea000192eb00 dead000000000002 [ 185.964385][ T7166] head: 0000000000000000 0000000080150015 00000001f5000000 0000000000000000 [ 185.964405][ T7166] head: 00fff00000000002 ffffea0001f81a01 ffffffffffffffff 0000000000000000 [ 185.964423][ T7166] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 185.964433][ T7166] page dumped because: kasan: bad access detected [ 185.964450][ T7166] page_owner tracks the page as allocated [ 185.964459][ T7166] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5848, tgid 5848 (syz-executor), ts 83234804127, free_ts 83098552564 [ 185.964497][ T7166] post_alloc_hook+0x1f3/0x230 [ 185.964522][ T7166] get_page_from_freelist+0x3725/0x3870 [ 185.964551][ T7166] __alloc_pages_noprof+0x292/0x710 [ 185.964579][ T7166] alloc_pages_mpol_noprof+0x3e8/0x680 [ 185.964600][ T7166] alloc_slab_page+0x6a/0x140 [ 185.964627][ T7166] allocate_slab+0x5a/0x2f0 [ 185.964653][ T7166] ___slab_alloc+0xcd1/0x14b0 [ 185.964676][ T7166] __slab_alloc+0x58/0xa0 [ 185.964699][ T7166] kmem_cache_alloc_node_noprof+0x269/0x380 [ 185.964721][ T7166] kmalloc_reserve+0xa8/0x2a0 [ 185.964745][ T7166] __alloc_skb+0x1f3/0x440 [ 185.964768][ T7166] netlink_ack+0x13f/0xa30 [ 185.964791][ T7166] netlink_rcv_skb+0x262/0x430 [ 185.964814][ T7166] netlink_unicast+0x7f6/0x990 [ 185.964835][ T7166] netlink_sendmsg+0x8e4/0xcb0 [ 185.964859][ T7166] __sock_sendmsg+0x221/0x270 [ 185.964878][ T7166] page last free pid 5221 tgid 5221 stack trace: [ 185.964890][ T7166] free_unref_page+0xcfb/0xf20 [ 185.964915][ T7166] __slab_free+0x31b/0x3d0 [ 185.964941][ T7166] qlist_free_all+0x9a/0x140 [ 185.964969][ T7166] kasan_quarantine_reduce+0x14f/0x170 [ 185.964997][ T7166] __kasan_slab_alloc+0x23/0x80 [ 185.965027][ T7166] kmem_cache_alloc_node_noprof+0x1d9/0x380 [ 185.965049][ T7166] __alloc_skb+0x1c3/0x440 [ 185.965072][ T7166] netlink_sendmsg+0x638/0xcb0 [ 185.965097][ T7166] __sock_sendmsg+0x221/0x270 [ 185.965115][ T7166] ____sys_sendmsg+0x52a/0x7e0 [ 185.965141][ T7166] __sys_sendmsg+0x292/0x380 [ 185.965173][ T7166] do_syscall_64+0xf3/0x230 [ 185.965205][ T7166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.965238][ T7166] [ 185.965243][ T7166] Memory state around the buggy address: [ 185.965255][ T7166] ffff88807e06ab80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 185.965270][ T7166] ffff88807e06ac00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 185.965285][ T7166] >ffff88807e06ac80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 185.965297][ T7166] ^ [ 185.965308][ T7166] ffff88807e06ad00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 185.965323][ T7166] ffff88807e06ad80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 185.965335][ T7166] ================================================================== [ 185.965384][ T7166] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 185.965397][ T7166] CPU: 1 UID: 0 PID: 7166 Comm: syz.1.354 Not tainted 6.12.0-rc5-next-20241031-syzkaller #0 [ 185.965422][ T7166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 185.965435][ T7166] Call Trace: [ 185.965443][ T7166] [ 185.965452][ T7166] dump_stack_lvl+0x241/0x360 [ 185.965489][ T7166] ? __pfx_dump_stack_lvl+0x10/0x10 [ 185.965523][ T7166] ? __pfx__printk+0x10/0x10 [ 185.965553][ T7166] ? lock_release+0xbf/0xa30 [ 185.965575][ T7166] ? vscnprintf+0x5d/0x90 [ 185.965600][ T7166] panic+0x349/0x880 [ 185.965631][ T7166] ? check_panic_on_warn+0x21/0xb0 [ 185.965655][ T7166] ? __pfx_panic+0x10/0x10 [ 185.965684][ T7166] ? mark_lock+0x9a/0x360 [ 185.965706][ T7166] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 185.965736][ T7166] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 185.965766][ T7166] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 185.965796][ T7166] ? print_report+0x502/0x550 [ 185.965818][ T7166] check_panic_on_warn+0x86/0xb0 [ 185.965841][ T7166] ? skb_copy_and_csum_bits+0x433/0x9c0 [ 185.965863][ T7166] end_report+0x77/0x160 [ 185.965884][ T7166] kasan_report+0x154/0x180 [ 185.965905][ T7166] ? skb_copy_and_csum_bits+0x433/0x9c0 [ 185.965931][ T7166] kasan_check_range+0x282/0x290 [ 185.965952][ T7166] ? skb_copy_and_csum_bits+0x433/0x9c0 [ 185.965978][ T7166] __asan_memcpy+0x40/0x70 [ 185.966006][ T7166] skb_copy_and_csum_bits+0x433/0x9c0 [ 185.966034][ T7166] __ip_append_data+0x2fc1/0x40f0 [ 185.966094][ T7166] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 185.966129][ T7166] ? __pfx___ip_append_data+0x10/0x10 [ 185.966158][ T7166] ? lockdep_hardirqs_on+0x99/0x150 [ 185.966204][ T7166] ip_append_data+0x14c/0x190 [ 185.966231][ T7166] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 185.966260][ T7166] udp_sendmsg+0x3e2/0x2a50 [ 185.966290][ T7166] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 185.966332][ T7166] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 185.966360][ T7166] ? __pfx_udp_sendmsg+0x10/0x10 [ 185.966402][ T7166] ? __pfx_aa_sk_perm+0x10/0x10 [ 185.966433][ T7166] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 185.966469][ T7166] ? sock_rps_record_flow+0x1a/0x400 [ 185.966497][ T7166] ? inet_sendmsg+0x2ba/0x390 [ 185.966524][ T7166] __sock_sendmsg+0x1a6/0x270 [ 185.966548][ T7166] sock_sendmsg+0x134/0x200 [ 185.966572][ T7166] ? __pfx_sock_sendmsg+0x10/0x10 [ 185.966600][ T7166] ? splice_to_socket+0xae/0x10b0 [ 185.966634][ T7166] ? iov_iter_bvec+0x4e/0x180 [ 185.966663][ T7166] splice_to_socket+0xa10/0x10b0 [ 185.966708][ T7166] ? __pfx_splice_to_socket+0x10/0x10 [ 185.966765][ T7166] ? __pfx_splice_to_socket+0x10/0x10 [ 185.966799][ T7166] direct_splice_actor+0x11b/0x220 [ 185.966835][ T7166] splice_direct_to_actor+0x586/0xc80 [ 185.966877][ T7166] ? __pfx_direct_splice_actor+0x10/0x10 [ 185.966912][ T7166] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 185.966951][ T7166] do_splice_direct+0x289/0x3e0 [ 185.966988][ T7166] ? __pfx_do_splice_direct+0x10/0x10 [ 185.967022][ T7166] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 185.967048][ T7166] ? bpf_lsm_file_permission+0x9/0x10 [ 185.967076][ T7166] ? security_file_permission+0x74/0x280 [ 185.967107][ T7166] ? rw_verify_area+0x1c3/0x6f0 [ 185.967139][ T7166] do_sendfile+0x561/0xe10 [ 185.967180][ T7166] ? __pfx_do_sendfile+0x10/0x10 [ 185.967207][ T7166] ? __sys_connect+0x165/0x300 [ 185.967238][ T7166] __se_sys_sendfile64+0x17c/0x1e0 [ 185.967264][ T7166] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 185.967290][ T7166] ? do_syscall_64+0x100/0x230 [ 185.967325][ T7166] ? do_syscall_64+0xb6/0x230 [ 185.967361][ T7166] do_syscall_64+0xf3/0x230 [ 185.967396][ T7166] ? clear_bhb_loop+0x35/0x90 [ 185.967419][ T7166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.967455][ T7166] RIP: 0033:0x7fe1ac37e719 [ 185.967474][ T7166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.967492][ T7166] RSP: 002b:00007fe1aa7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 185.967518][ T7166] RAX: ffffffffffffffda RBX: 00007fe1ac536058 RCX: 00007fe1ac37e719 [ 185.967536][ T7166] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000005 [ 185.967550][ T7166] RBP: 00007fe1ac3f132e R08: 0000000000000000 R09: 0000000000000000 [ 185.967565][ T7166] R10: 0000020000023890 R11: 0000000000000246 R12: 0000000000000000 [ 185.967580][ T7166] R13: 0000000000000000 R14: 00007fe1ac536058 R15: 00007ffcd1192628 [ 185.967605][ T7166] [ 185.967858][ T7166] Kernel Offset: disabled