last executing test programs: 26.022274175s ago: executing program 0 (id=3845): syz_emit_ethernet(0x3e, &(0x7f0000000180)={@broadcast, @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x8, 0x0, 0x0, @local, @local, {[@hopopts={0x3a}]}}}}}, 0x0) 25.785576427s ago: executing program 0 (id=3849): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x49, &(0x7f0000000b00)={{0x12, 0x1, 0x0, 0x3a, 0x50, 0xee, 0x8, 0x20a6, 0x1105, 0xc2eb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x37, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x2, 0xff, 0x0, [@cdc_ncm={{0x5}, {0x5}, {0xd}, {0x6}, [@mdlm_detail={0x4}, @mdlm_detail={0x4}]}]}}]}}]}}, 0x0) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0xf0cb2f4a0c2cfc5d, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004340)={0x2020}, 0x2020) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x804810, &(0x7f0000000d40), 0x9, 0x61c, &(0x7f0000000700)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) 22.607988976s ago: executing program 0 (id=3856): syz_mount_image$bfs(&(0x7f0000000240), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000400)=ANY=[], 0x4, 0xb1, &(0x7f0000000400)="$eJzs1zFqwmAYBuC3oW3aJT1Ah94gd+hRSsd261Rx8ELunsIjCB7AwU1cIjExZHYwIM8DCby8/wff+P/r4/I9VdK85awZ+fuf/Xz9tv9VBs/hjhRJyiQvbai6vPvsuoe+3+zn35dvNPo40coAAMCVitRJXvubfhZF6rprtsOZj/YtcOjD02i4vOmqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJM4BQAA//8fTCFM") r0 = open(&(0x7f0000007f80)='./bus\x00', 0x143042, 0x0) ftruncate(r0, 0x2007ffb) write(r0, &(0x7f0000000200)='\b', 0x1) 22.409053305s ago: executing program 0 (id=3858): syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@nobarrier}, {}, {@discard}, {@order_strict}, {@order_strict}, {@discard}, {@nodiscard}, {}]}, 0x1, 0xa07, &(0x7f0000000b00)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x1217880, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x80000004) 21.761713461s ago: executing program 0 (id=3864): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IPTABLES={0x5}, @IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x2}]}}}]}, 0x44}}, 0x0) 21.19186651s ago: executing program 0 (id=3868): socket$inet_tcp(0x2, 0x1, 0x0) r0 = open(&(0x7f0000000280)='./file0\x00', 0x40c2, 0xd0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000180)='./file0\x00', 0x101041, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffe}]}) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000004300)) sendfile(0xffffffffffffffff, r0, &(0x7f00000002c0)=0x80000000, 0x7ff) open(0x0, 0x2c2602, 0x160) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000003800), 0x11, 0x0) r1 = getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0xae) ptrace$peeksig(0x4209, 0x0, 0x0, &(0x7f0000000780)=[{}]) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x0, 0x0) getresgid(0x0, 0x0, 0x0) getpgid(r1) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setuid(r2) fstat(0xffffffffffffffff, &(0x7f0000000d00)) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpid() clock_adjtime(0x0, &(0x7f0000000040)={0xd54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 6.605982483s ago: executing program 4 (id=3934): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000680)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb, 0x2e, 0x35, 0x0, 0x413, 0x6026, 0x18aa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa6, 0x9b, 0xce}}]}}]}}, 0x0) 5.532464512s ago: executing program 3 (id=3943): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 4.552462656s ago: executing program 3 (id=3952): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x24}, 0x24}}, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000440)={0x2, 0x0, @remote}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 4.315422423s ago: executing program 3 (id=3953): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x26, 0x4, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x1000, 0x5, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x34, 0xc0, 0x3, 0x0, [{@multicast1}, {@dev, 0x659}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd200}, {@private, 0x7}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast2}, {@private=0xa010101}, {}, {@broadcast}]}, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.462927057s ago: executing program 4 (id=3962): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) 3.155093623s ago: executing program 4 (id=3963): syz_usb_connect(0x0, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2a, 0xaf, 0xee, 0x8, 0xaf0, 0x6751, 0x758b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x7}}, {{0x9, 0x5, 0x1}}]}}]}}]}}, 0x0) 2.472026186s ago: executing program 2 (id=3964): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000100)=0x668, 0x12) openat$cgroup_ro(r0, &(0x7f0000000640)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='jbd2_handle_stats\x00', r2}, 0x10) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r4, r3, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000200), &(0x7f0000000280)=r2}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r2, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000005c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000600)=[0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x0, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) 2.315549384s ago: executing program 2 (id=3965): socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$hfs(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000480)={[{@iocharset={'iocharset', 0x3d, 'cp949'}}, {@codepage={'codepage', 0x3d, 'koi8-u'}}, {@umask={'umask', 0x3d, 0x9}}]}, 0x1, 0x2e5, &(0x7f0000000140)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000500), 0x0, 0x0) socket(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000640), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x80001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2400000026000100000000000000000008000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32], 0x24}], 0x1}, 0x0) 2.303119325s ago: executing program 3 (id=3966): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@var={0x3}]}, {0x0, [0x0, 0x0, 0x61, 0x1e]}}, 0x0, 0x2e}, 0x20) 2.046302398s ago: executing program 3 (id=3968): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x2810000, &(0x7f0000000380)={[{@user_xattr}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@nobh}, {@usrquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x88d}}, {@delalloc}, {@discard}, {@nojournal_checksum}]}, 0x1, 0x54f, &(0x7f0000000b00)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbZdnamc8HbnvOvTc995t7v6fn5iQkgKE1kf0oRLwcEd8kEQfbto1GvnFibb/V+1dnsyWJRuPTv5JI8nWt/ZP89/688lJE/PZVxPHCxnZryysLpXI5Xczrk/XKpcna8sqJC5XSfDqfXpyemTn19sz0e+++M7BY3zj7z/ef3P7w1NdHV7/75e6hm0mcjgP5tvY4nsC19spETOTPyVicfmTHqQE0tpMk230A9GUkz/OxyPqAgzGSZz3w//dlRDSAIZXIfxhSrXFA695+QPfBz417H6zdAG2Mf3TttZHY07w32reaPHRnlN3vjg+g/ayNX/+8dTNbYnCvQwBs6dr1iDg5Orqx/0vy/q9/J3vY59E29H/w7NzOxj9vdhr/FNbHP9Fh/LO/Q+72Y+v8L9wdQDNdZeO/9zuOf9cnrcZH8toLzTHfWHL+QjnN+rYXI+JYjO3O6pvN55xavdPotq19/JctWfutsWB+HHdHdz/8mLlSvfQkMbe7dz3ilY7j32T9/Ccdzn/2fJztsY0j6a3Xum3bOv6nq/FTxOsdz/+DGa1k8/nJyeb1MNm6Kjb6+8aR37u1v93xZ+d/3+bxjyft87W1x2/jxz3/pt229Xv970o+a5Z35euulOr1xamIXcnHG9dPP3hsq97aP4v/2NHN+79O1//eiPi8x/hvHP751f7jf7qy+Oce6/w/fuHOR1/80K393s7/W83SsXxNL/1frwf4JM8dAAAAAAAA7DSFiDgQSaG4Xi4UisW193ccjn2FcrVWP36+unRxLpqflR2PsUJrpvtg2/shpvL3w7bq04/UZyLiUER8O7K3WS/OVstz2x08AAAAAAAAAAAAAAAAAAAA7BD7u3z+P/PHyHYfHfDU+cpvGF5b5v8gvukJ2JH8/4fhJf9heMl/GF7yH4aX/IfhJf9heMl/GF7yHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAbq7Jkz2dJYvX91NqvPXV5eWqhePjGX1haKlaXZ4mx18VJxvlqdL6fF2Wplq79XrlYvTU3H0pXJelqrT9aWV85VqksX6+cuVErz6bl07JlEBQAAAAAAAAAAAAAAAAAAAM+X2vLKQqlcThcVFPoqjO6Mw1AYcGG7eyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeOC/AAAA///ktDiZ") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) sendfile(r1, r0, 0x0, 0x80000000) 1.894038308s ago: executing program 2 (id=3970): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_io_uring_setup(0x3f01, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, &(0x7f0000000100)='4', 0x1}) io_uring_enter(r1, 0x7f5f, 0x0, 0x0, 0x0, 0x0) shutdown(r4, 0x0) 1.66634864s ago: executing program 2 (id=3972): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x24}, 0x24}}, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000440)={0x2, 0x0, @remote}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 1.532057602s ago: executing program 1 (id=3973): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x48}) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x4e) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 1.391637741s ago: executing program 2 (id=3974): syz_mount_image$minix(&(0x7f0000000100), &(0x7f00000066c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1810002, &(0x7f0000006800)=ANY=[@ANYBLOB="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", @ANYBLOB="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", @ANYRES64=0x0, @ANYBLOB="375e3992c06be11221202d161d77ad3db665444c4d5065ac49c96b4a4d3f4fb2af3a75bf1326dcf5df52724468db6dadc81ba536783e5e15b2f4538c9bb51509447f507be622f59b61d4ac3aced88579ba33c69b322d642e51e73bcf744c3074fe82902c5999f553bc907eb64c2d4cefc3a5a2037ce6c7c55793a3af1d654e05173054758efca95f059b0fc4354d17b034cd63eb970d3ed859ee0922dd611b714ace6ffb58ac7ed9c705b8671c98ccde8143398357aabf14aa26edeb60c33a292bb76505423992c0600d321a5d321a1ca26de2aa0fb21a0459e6a84fea7cfc57b9356d4cfd40a8c46c818be05358c2c710c9f6f1721c243dbc425acffdc35f27ab3ee614cf027be7204c7dac2baa857317b75008550205397f49c4d01ba70872c0965eb16e26a2852b2380c68eea67f7484a8d3ae82002feccb16721c9f54151ec9f5fa212b3e1f745f329cfc365e3aa6d3d829e81ba158faf5fe0d7dd60f17f410f6593f0fdb6f78547486ceca5acc45a51d37212bffda73a660cda91165d0030ed92f8e11eb413b04e8743f591deb42efad7e7cc72e0d4cc62adeba6e9ad38d339d413b55c6094f612f711a6e1039742dee793189650038cecbed1f24d1c589864d33da4fbc7b9c54abcedabf0c1588bb9ee335afd2c208ef0962bef09e4d1733f4de9ec4699364f246266b25412bd3fb058697e9cd594ed9f077e28d1c14eedb623fe149fb6d67ab845c2c84fc58df1c0af7553dc0cfc8c1a9a2e16973e9c5c7a063e2b3c97aa0dbf0af7dee3d84ad4cbb6eed21a4afc86b0a659e9696e4068d720d16be2dcbd6b8e44143d4e30a7cc895f70222dd11ef989b87bceba801a09a7d0420962cc37afdd76fd4e8a9da8e5865bb3e355aa00c1f09295ac3b575cfecf10e699efb4dcfaacaa75b5ffc3261bd5240a364034660703da23f80a9b23337f75bd0ac20e41a8789d7bc42b63676b99d40741198ab27b31e26c5ed655021ad20b412d0ee90c940ba30afe3e3ddffd3a674f246cc01e4d68fad953faf5d888e02f7c2f045c32bb9eb4cb7806ba199ed62ae4f72b1ff22458473fc8cec55d8baeabb015fd769c9aa6062317f5b04292273a7aa9d4b460fd67a4a5860278f04556c6f2aee59d6c0abf34f76031b4e0093f2415f04541f191b50ff473db3a927f4217b42e7adeb67e1190f9b2ab317e0a5fc993ed8f1f99ffc65d42d79c75dbe6b39e2e729d14f26b7735e325532e98d259af26450f9b4b8073ad91a557fd5e3f4438cada86dbd52341b6218014339fa68c0af9069bee818e61ce736af650afc57b7736bd18387a5a31d39e89dbb50961b51ef7771f51bea188507adcb6aba577d12dc404f71110fac39dce110a9aaf53ed451d002ab52372a1e534205c3f6dcc9033496ed87f716dd5acef6b31af24d360c8fcef10d8299569895ab5263e8e5273eadf4057bf15041c6aed21cc66083b7342c346650102895877f871344d48a76565de75708e79abb9555095475b04a9338921f0db062c5ca0ea23014502271f5628115c897c9015f31cc24986987942d7ab9650040fcc558590b9cb73fa1f352d5edd33a3669a52448826919c2a669c9628f10a7f9aa10c05a54c7b64ef8b13d997db63ddb9a90b8b6b8c757da1d229f6330be424836285c99ba08aee559c77c65e76dce358590fd2760cc29a9e1c3824eb9a638f37320313ada1590af6beb131f828594357019b17869f05795e912cd385101aaef8d2008c594a096966997f64d4de0cb407afd01d169b34e4825b42f09a698aa33f877548f9a4f90655e2a4481dd2befe5180a232e54e86188eaa28277b2bf9cb0a3b46e788c8c476ce80da46b46fd13072950d2c637637ae134a830fb5894a368fdbe2a593a84b8b1fe3e4d9b0b8254c0dc1ca116c632abb5fa1fe4a3b1f3d7b7ba1e95d33e4900ee32427ed88c094c7a0aa725ba9a8ae7bb68c466fa808b2e7046402f6e90e28098c6fbc6388d6d6a8eba46041fd067d2f45f8ca38ee8820a4ce4a5e1a80df67af0f211441aa6186c3db017416c24d4cbc6d5ffb415a4b05fb7c581f6d144da8377684cfd6525e377882a2a939f6d2f588a2c91860573e37f58fd77549a92bf602d89dd5659e5f97f6841b14b7aeda5e3d090c268a5eda7afa3595119e908192849347d6ba275881c31d99b848e6827faf10b698c24095f210bdf308f2acc10432be067c55ec7f230bdb04fee4b59ad25f26226d2064b49a8754e436f36184d2761be0dab6592461caa7fcb08e94fedafab0f244acd5a0c9fd76a22b546c218a6849b214e8297b77fc9080bd534b54b1f6161e976ab1cf2596c92a02e9541bdcfcc45ef2ab4e1e784061af1d57477f56840d36a3468478b1ddd448454b65fe4c8057654ff2494a119d35e43e7bdcc965ff2852f9bfd8fb65968f308604d08ec146dba28d5a1f8def6c96ce9ca893a5e9d39e131af7c75dddd2198fa84f857237e413b6a2af3cbb1bf19e9a62e0d51ea998d40193087082831a580ae4b05739c8b3d981d384003abdd354456887aa521b30a1cb6cc1548be8b8f521ac65ea408c756ec1e791eb99d94911580b8e91b13b62c3ead90166072e1bdedb91582ebf0339f9a58641ff7168a13624024d8e956855d15ed1751fe4c7a0511d44a9328e052fdd543b617f949e1b7e19d410a2f23a181371d98f1323468137d768461b0fca7f76f1654bd98300972bd75666608cc9f046476da7359854081b4355b1ff920b7568f20f53feaac5bf9e9e5ab1af8fb9ab2155af8a1286c68d3e1e4272606cd84824503f827f6dc20640028c30ad7f0a77d322123562d174f4d098c486b7bcaf76435b76a3ce9e06c9767ad0a55503a27cddddee90385d5fe93cfdb4e2c03ccdb9b9e8433e6af6465e1bcd20a7fda3f53613d5c22dcf06363a2b74b27cd4538a92b570a2bf208c036a5b9e5aa338dfc82f3f86223fcf228f682187a2b4ba88b41300994f7860fdfeb336f3933f338dfc0c461f30e51c796c9e3748c393ce201afb9da818f8cea1a7e43a0a662b2cb23d16e575177cf772a45b0e870c81d2a625f91f8fc7c60f372e228536bc1de1ee6ff1a1e411c9ff740a547c62cab8ea3302e5d121fdc7cb9763fc05ccd2e9afd98cbb68ac9fe5f4c8a73c61caf3c6d339f8035d363ed9058a83560efc728dc61163ef67bbbaf051a5038b3143ebe14b8a7bced5c5ce6053db12d6a4eeef0c050d40bcade6a1fa1c807bdb12bbc635a4a284f9e12cd037db49fa95ce7a7990ac253cf60bb2a81c39d08cd68fa2d2f035beead1d9a02fe1bbbf73cc08c71d4622be2728a5d0686a1dfd5e1dfa03eddf156fc4dbe5e1365efaea142d03836877d36320881594a2bffbe41856bd1ba3ea78fc40d68d1aa3301fda4dc1e49fcf6ee5ea51bbc7096a6c84b65a9c05e76f506bb828acd7cd070215d0bbb6b419159e330d09e9e3f9902dce3e530dfe178feadde42768972826103a681541797eaf594e5288d443a2961dab9337b5194a760577b509690fa40e1e7a92e3265536db95b90e520b7537c652fc4c0bbb2e76428d9d9191dae0cc079474513c2f6388a94c6d157bc115436d03f9a8e42d19f99fee9e1083a8afbd3aa0a4e23f1a7a6c6d75c45e4ea54f90b6e3bea1d738b410ecd9fd846e60464b342789fbd7cdd81cd37f704036bdf3ebd591b330b34364cd4ed503d1356a831c74370923c6d498caa943e3b7eca1b9d3716ebb5ad4502bb76628b4a11cda7159d20db641423324ddc2a08e6e3254ab5047733755147835971ca4c2707c072c69c88af88721b63b5f8ba83034e76732fa0dd725a538dd3e57ced026e72109823371f12accf189009156c278daf16d87c70d438aa7074c893c117e79684e267d5c9b64bf527772bf7f75a2b7b5cbefdf272105901eeef1ad62b7ad3bde07719a3cfed6892b6f91f1ea94247b0c8233bff29507097ea6b9912d40947f70fa4ce2130a399a5ca4e9faebe24fc82bccec544ea22e684c1ea1e46d3241aebc61abdc8d69bc6d41f8e534269eb3eb6073d51c013c86cc8d870810c4fd1e0aeb0e0c83c14b296dc506573253d953e3438ee251251691b884fed8905eff4de667b1cdcd8a0b4db8b5f0a3cba448124df097288c19750bdd4318d2d6f6cef85f783f0bf4da320332aa211d4053dd3e62e99822d895d4e58757a51bba293fa118f410cc48695808c239d33b60a6cea2334770369d25f36cd54223aea5a37ccfbeb9b07e872bf72c1ed868ebeb59aaf768cb24152fe7c81f1b19ef7d5a2fd0e15ae061a3bde72936d54cd5a30bc300eabb44c7eb6a2b69cc14dc386da881d57108a375195be503d0701ec01f3841868ee708453eef7930b6ccd211be3370f05a05d294db91636c1cc14b7374d7bf02eb5000c8d6e3a2df660979fc275b77b43b457c3b53a12396b0d809bcea90ba106a3385ad244ff0c544d151f31f50d242776466ec3d9f8cc5bb73f89f7845fed3c4ab340c005d846ec9ef8feda4b3b87e4596bb51de73c141fe07b410f0eea9753f38963633f6ca6ce533e6ed85ea8e28e01098541c3e4dcddd094e2c3de5636c22580495caa0bad814639689fef3c7ce83435021e2907032a9ad1876478c67440a3df10d5ccecf9e2e8232509e8207fd6d68e5d3507ff871c1a73ccf2adde6d800164247949ecabe4edc0e2a13fada9326d2dc4e4a1edb1c9498066638feff434d4bf910fde169288e77776a495b4abf00f7352ec29a8bddef084445d13ea913a810d1c17403b268fd3bb03d20d78f6d3eca57726312e1796991780aee11f09b3048c8b0fa46372b9f2f7ec34d18d04e90db2ed290375a295fa1753aed0b33210ba23053418c42bb2d08929984e5784082810de0e98ec740dc0be77522cb526b6aa609916de0af480e8b8fbd20b4ecc8802a47a2b9f542f3daab393e20d9c3e20b249f7aa64155de85620727bd9be5b1528a0ad16355ab0790ca533a54a33bd91b73db78adfc057c10edc5ea4d3d5b60a4837dfc013601d2d1d9a34f91f1604660560107ace654def9194c588a531d87f0f5260e90fdf7d38087af498ab9c97cc76d4213ec6f1247f2d6bbb50bdc7acf0207fc789828d8964666df6256a2064227cc1b4b5ea963aaf909f8c19f000e8b6d8871757e5b2ce93d4a115449e3d77928839143dc8e7cae8e46cae5b370e761a3d3bde20bdf49079bbeef9dfb8f9e5f3699206dc1096810f632b2346e5efc8e27dd370ce5a4f95f7d787b077144e864908249e4c38c6e2d4955080ed1997f8db0e7e15d3291775f2018487a4ddbc557fc06d86cf2aaba86c52b9e588ff21b3a477210dd1a320710527e01806dbc6faa5d87960b2fe7c374f620b8f8ee0c228070d7c4baec6f3d0483c5fdb6d9f6b39a983ab9b0f3cca3e605b8c62939201a4057f8ab1d45f9b331e748458a3eedc040e0f48bf0ae4ad50b361710ae3d52884cc0188f24a35ca2bcf50a4d02427320850df314584768c7071879b77ee55ea074aa0c9f6ccb571b255235d9229f86d80fa1b0d0061349197ac54b74254f2377fe4c04d1db62b8ab104694ac02e3b3b335ad9de4bac37408d77f122939f9454e9f566bc7e2074ce758193a7784721871a59ef89eab0f970cf69b2db69bde00b1272ee8f4acf6a505d8bec25ff720c134afd67997dba469bc178e9fdb95921e2a56322bd868a44cd41a273b668c64c21327dd78c652695ded3419e4178566e5fcf12c6b678099f6289f80de95dac340788c277a68329a9bb84c9013821e6bc5bf33c5e0dc73a535bf", @ANYRESHEX, @ANYRES16, @ANYRESHEX, @ANYBLOB="2da97369bd5bd2a022e4fea628166430fb7a26dae38cd827ad7f8cff5d2246bdd2cc0e8101b9631aa9db6c88c4ea13a8fbc6a23601da47409ecba43e29d90521e4a37f2f57fa7ce2366b5b89b5b9529791fb53b47e83c2014cd5779926a7dd8a0de70a50b2baf658b32d6d108efa8d3b6101762c8308a5b3351fd14516c9c33e6c6bd15e956f84604a27325b8ebb315aff3e39aa98ba22dffb1b6a7c1acafedad4ef237de4595f77f679e98e9dcbf01dc5bcbd5c199b9e95c24b", @ANYRES32, @ANYBLOB="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", @ANYRESDEC=0x0], 0x1, 0x1cd, &(0x7f0000002180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x6b142, 0x0) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1, 0x8000000, 0x0, 0x0) 1.011254538s ago: executing program 1 (id=3975): r0 = socket(0x1e, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f00000016c0)=[{{&(0x7f0000000200)=@tipc=@name={0x1e, 0x3}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 599.841516ms ago: executing program 2 (id=3976): r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000180)='.log\x00', 0x202000, 0x33) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000001c0)={0x7f, 0xd, 0x5, 0x3, 0xb, "a9cab2e042181338"}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0xee00}}, './file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x2) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x7, 0x0}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = syz_open_procfs(0x0, &(0x7f0000000340)='oom_score_adj\x00') lseek(r5, 0x401, 0x0) socket(0x1, 0x0, 0xfffffffe) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCFLSH(r7, 0x5420, 0x20001100) syz_io_uring_setup(0x239, &(0x7f0000000080), 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) userfaultfd(0x1) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f0000000900), 0x0, &(0x7f0000000680)={0xff}, 0x0, 0x0) sched_setaffinity(0x0, 0xffffffffffffff84, &(0x7f0000000080)) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 599.512857ms ago: executing program 1 (id=3977): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001940)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x40, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}]}]}], {0x14, 0x10}}, 0xc8}}, 0x0) 535.201487ms ago: executing program 3 (id=3978): r0 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0x7, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x30, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14}}, 0x58}}, 0x0) 411.441915ms ago: executing program 4 (id=3979): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f00000005c0)={'syz1\x00'}, 0x45c) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xf) r1 = dup(r0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_CREATE(r1, 0x5501) 389.95699ms ago: executing program 1 (id=3980): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x7279, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x2058}}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)) 230.55678ms ago: executing program 1 (id=3981): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_io_uring_setup(0x3f01, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, &(0x7f0000000100)='4', 0x1}) io_uring_enter(r1, 0x7f5f, 0x0, 0x0, 0x0, 0x0) shutdown(r4, 0x0) 136.770886ms ago: executing program 4 (id=3982): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 16.638191ms ago: executing program 1 (id=3983): r0 = socket$inet6(0xa, 0x80006, 0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x2, 'lc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast1, 0x0, 0x1000002, 'lblcr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001a40)={'vxcan1\x00'}) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000010000400000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$iso9660(&(0x7f0000000680), &(0x7f0000000800)='./file0\x00', 0x1480e, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0, 0x694, &(0x7f0000001380)="$eJzs3Vtv2+Ydx/Ef5ZPsDkGwDUEQpPGTZAUcLFMkuXFgZMCqUZTNTRIFUt5sYECRNXYRRE63JAMW33S+2QHo3sDuerOLvYgCu+672K42oNjuBgwYOPCgk3WyEtlpm+/HaEWRfz7886HCv2mJjwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGTZ5Xy+YKnq1nd2zWh22fdqY5YnrS3oVjJxa+J2JSv6T9msLiezLn+7u/hS9L8bupo8u6ps9JDV0VuXLt7/1nymvf6YhF6Gpm3w2Yujxw9arf2np4id09TNv07KnCJoy6m7gefWSluOcQPPbG5s5O9sVwJTcatOsBc0nZqxfSfT9HyzZt8yhc3NdePk9ryd+la5VHXaM+99r5jPb5gfLSUHWlIusLfdatWtb8Ux0eIo5p755GdJgFOqGXPwqLW/PinJKKhwmqDipKBivlgsFIrFwsbdzbv38vn5gRn5iJXv0EDEzF+0+IqZ3ckbeEWZqP7/zZKqyqquHe3KDP2xVZYvT7URy1Pt+v/OHWfsdnvrf7vKX5Z+kC6+orj+X0ueXRtV/0fkYmTiFYYtsUbMn+5nIc7I6Jle6EiP9UAttbSvpzNo28iszqSVc/jZkqO6XAXy5KqmUjzHpHOMNrWhDeX1vrZVUSCjilxV5SjQngI15cSvKFu+HJXUlCdfRmuydUtGBW1qU+sycpTTnjztqK4tlVXSf8IwPNCjuN/Xx+SodlBhRMBSb1BxTEuj6v/PP05ep2n9z1P/31TJ62Apefh8XAzwJRCm1/9TWj2bbAAAAAAAwFmw4r++W/F7929LClVxq07+dacFAAAAAABmyFK4pKuyout/SW/L4vofAAAAAICvGyu+x86StBJ/qN/q3gl1mj8CzJ1DigAAAAAA4BXFd/5fW5TCeNCKVVlTXf8DAAAAAICvgN/3jLE/3x5jN2y/rZ+RtPr3Jeuzfy3JX7COG7vfsQ5L0ZLSYRoz8AmAZuWKdSEdqDd+WJQUP7Odq1a6tXQQzM64g18cTBrr3/JPJLA419vAiASsaMsb8+kzfaLrySrX03HmHx5lFC9JtrJScatOzvaq9wsqlS5kms5u81dPHv1a8jv7efCotZ/74KPWwziX42jW8WHU6Md96WSGd0Y3l+fxeAvxPRfD9nhZlfYm/1CvrVjxdvPt/Z9T6TDTu6FxB6C7zd/qRnLMbqwksStHnRH3o/3PRvtfyMWHrG/v/QWrm0Xh5J4POxAjssjGWdxMYm6u3Uwe2vlF7WSs7HfnpGJu8Bj0ZVHszWJyX1j/HuiLcVmkfbEeZfHXqKETWfz0s2Tl9emyGDgiAPC6HHSrUDyI+UDdbZeH9kntperO5Or+Xn91f/6nMIxXmJPm0/cmxm4lq+iMvmbFdWhR8Yl1/sqQM3o+rStZ9Z7R/xcmOjX2dNXtOAzDk/v6l+53IKVpD2Tx3zAM7xfiSvLHE1X102iFT0duN6gW56IuvPP88BfxAPiRD/c/3H9SLK5v5N/N5+8WtRD/qpA+zInaAwAYMPk7duKIzJgI611dT9q4/vCf7yRTfRXvm52PFOT0gT5SSw91u/0VAqvDW13p+RjC7eSqVT1XrebSxfvL0snYgm6PvKqLa2lPbLETu6D2Kv2Vuhu7fvYHAgCAc3RjQh22hv6GkO2r/7e1lkSsXRl63d1fy9Or484l/ajYwuTk35t1bwAA8GZw/C+slebvLN93G+8XNjcLpea2Y3zP/rHx3fKWY9x60/Ht7VJ9yzEN32t6tlc1DV9LbtkJTLDTaHh+01Q83zS8wN2Nv/ndpF/9Hji1Ur3p2kGj6pQCx9hevVmym6bsBrZp7Pyw6gbbjh+vHDQc2624dqnpenUTeDu+7eSMCRynJ9AtO/WmW3Gjybpp+G6t5O+Zn3jVnZpjyk5g+26j6SUNtrfl1iueX4ubzSmc+osOAQD4Onr24ujxg1Zr/+nJieXo0jyZc6wRMYMTi0MaZIwgAAC+ZLrleoqVsmeYEAAAAAAAAAAAAAAAAAAAAAAAGDD5lr4pJxaG3Swodeb88kI6R79R9xbDgXYszTqxaSYy067VviXi6PHnY4KXO3Pa3d8bczzNRnVReukd/Mc3pLfiOUrmzM++D5fHHNyzmPj+QdKjo3tMI3psqXMs5mf/zyGaePLnEYvCMAzHr77U34eL43awf2Je0tPFVzgE538uAnC+/h8AAP//ufI+Yw==") r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r3, 0x1, 0x0) getdents64(r3, 0xfffffffffffffffe, 0x29) 0s ago: executing program 4 (id=3984): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000800)={'sit0\x00', &(0x7f00000007c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @empty}}}}) kernel console output (not intermixed with test programs): on: batadv_slave_0 [ 966.367150][T15147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.377012][T15147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 966.393326][T15147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.415993][T15147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 966.471827][T15156] veth0_vlan: entered promiscuous mode [ 966.572118][T15147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 966.582854][T15147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.595310][T15147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 966.606161][T15147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.629566][T15147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 966.655047][T15147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.668290][T15147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 966.740957][ T3621] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 966.753600][ T3621] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 966.803539][T15156] veth1_vlan: entered promiscuous mode [ 966.846767][T15147] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.867379][T15147] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.876156][T15147] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.894429][T15147] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.250443][ T5492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 967.258915][ T5492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 967.340795][T15156] veth0_macvtap: entered promiscuous mode [ 967.432323][T15156] veth1_macvtap: entered promiscuous mode [ 967.567632][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 967.575517][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 967.611282][T15214] loop4: detected capacity change from 0 to 16 [ 967.629273][T15214] erofs: (device loop4): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 125300) [ 967.642237][T15156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 967.661458][T15156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.672026][T15156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 967.693568][T15156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.705739][T15156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 967.725032][T15156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.745857][T15156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 967.765256][T15156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.778309][T15156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 967.809688][T15181] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 967.822903][T15181] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 967.864006][T15181] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 967.867215][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 967.889392][T15181] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 967.897263][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 967.931585][T15178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 967.951684][T15156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 967.973791][T15156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.985616][T15156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 968.007281][T15156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 968.025539][T15156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 968.036762][T15156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 968.057214][T15156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 968.078247][T15156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 968.099682][T15156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 968.119578][T15156] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.137031][T15156] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.158663][T15156] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.173641][T15156] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.214723][T15178] 8021q: adding VLAN 0 to HW filter on device team0 [ 969.331383][T15224] loop4: detected capacity change from 0 to 256 [ 969.340009][ T5155] bridge0: port 1(bridge_slave_0) entered blocking state [ 969.347288][ T5155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 969.359410][ T5155] bridge0: port 2(bridge_slave_1) entered blocking state [ 969.366688][ T5155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 969.498398][ T3621] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 969.547122][ T3621] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 969.701387][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 969.738119][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 969.844298][T15226] loop2: detected capacity change from 0 to 4096 [ 969.875003][T15226] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 970.232013][T15181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 970.380775][T15181] 8021q: adding VLAN 0 to HW filter on device team0 [ 970.393664][T15226] ntfs3: loop2: failed to convert "c46c" to iso8859-14 [ 970.464174][ T5190] bridge0: port 1(bridge_slave_0) entered blocking state [ 970.471464][ T5190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 970.558986][ T5190] bridge0: port 2(bridge_slave_1) entered blocking state [ 970.566214][ T5190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 970.729340][T15240] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3218'. [ 970.767379][T15240] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3218'. [ 970.776505][T15240] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3218'. [ 970.840044][T15178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 971.031519][T15178] veth0_vlan: entered promiscuous mode [ 971.093853][T15178] veth1_vlan: entered promiscuous mode [ 971.326366][T15178] veth0_macvtap: entered promiscuous mode [ 971.354350][T15178] veth1_macvtap: entered promiscuous mode [ 971.519598][T15178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 971.557813][T15178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.595131][T15178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 971.629882][T15178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.657226][T15178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 971.707140][T15178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.757326][T15178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 971.787121][T15178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.807187][T15178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 971.827727][T15178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.862109][T15178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 971.912483][T15181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 971.974837][T15178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 972.017615][T15178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.047041][T15178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 972.068782][T15178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.079189][T15178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 972.130916][T15178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.152662][T15178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 972.165814][T15178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.186341][T15178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 972.204936][T15178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.218381][T15178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 972.268621][T15178] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.290187][T15178] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.317384][T15178] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.336485][T15178] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.487668][T15239] loop4: detected capacity change from 0 to 40427 [ 972.515418][T15239] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 972.537426][T15239] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 972.588872][T15239] F2FS-fs (loop4): invalid crc value [ 972.604456][T15181] veth0_vlan: entered promiscuous mode [ 972.633171][T15239] F2FS-fs (loop4): Found nat_bits in checkpoint [ 972.768010][T15261] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 972.818616][T15181] veth1_vlan: entered promiscuous mode [ 972.866838][T15247] loop3: detected capacity change from 0 to 40427 [ 972.889952][T15239] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 972.900189][T15239] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 972.909202][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 972.925419][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 972.965587][T15247] F2FS-fs (loop3): Found nat_bits in checkpoint [ 973.029452][T15267] loop2: detected capacity change from 0 to 512 [ 973.049921][T15181] veth0_macvtap: entered promiscuous mode [ 973.069100][T15267] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 973.104013][T15181] veth1_macvtap: entered promiscuous mode [ 973.114416][T15267] EXT4-fs (loop2): external journal has bad superblock [ 973.143172][ T35] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 973.156785][ T5491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 973.166528][T15247] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 973.179498][ T5491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 973.182374][ T35] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 973.222421][T15181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 973.260582][T15181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 973.317227][T15181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 973.347503][T15181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 973.367149][T15181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 973.397114][T15181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 973.417257][T15181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 973.420995][T15239] F2FS-fs (loop4): skip recovering inline_dots inode (ino:3, pino:3) in readonly mountpoint [ 973.437139][T15181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 973.461621][T15181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 973.485909][T15181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 973.527145][T15181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 973.542185][T15181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 973.568177][T15156] syz-executor: attempt to access beyond end of device [ 973.568177][T15156] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 973.569826][T15181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 973.593618][T15156] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 973.660907][T15181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 973.707107][T15181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 973.717032][T15181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 973.757362][T15181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 973.777165][T15181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 973.817758][T15181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 973.847326][T15181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 973.887292][T15181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 973.917341][T15181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 973.947763][T15181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 973.977376][T15181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 974.008268][T15181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.029443][T15181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 974.048552][T15270] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3227'. [ 974.087327][T15270] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3227'. [ 974.117775][T15270] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3227'. [ 974.182850][T15181] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.257377][T15181] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.266162][T15181] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.321735][T15181] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.747300][ T1044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 974.755188][ T1044] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 974.861551][ T5492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 974.894959][ T5492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 975.005609][T15284] loop2: detected capacity change from 0 to 256 [ 975.058667][T15284] FAT-fs (loop2): "posix" option is obsolete, not supported now [ 975.082184][T15284] FAT-fs (loop2): invalid media value (0x29) [ 975.104035][T15284] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 975.146426][T15284] FAT-fs (loop2): Can't find a valid FAT filesystem [ 975.660719][T15303] loop1: detected capacity change from 0 to 1024 [ 975.769073][T15303] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 975.834904][T15276] loop4: detected capacity change from 0 to 32768 [ 975.956973][T15276] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 976.076817][T15178] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 976.194949][T15276] XFS (loop4): Ending clean mount [ 976.231160][T15276] XFS (loop4): Quotacheck needed: Please wait. [ 976.277959][T15332] netlink: 'syz.3.3248': attribute type 2 has an invalid length. [ 976.386580][T15276] XFS (loop4): Quotacheck: Done. [ 976.415449][ T29] audit: type=1326 audit(1720495838.986:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15300 comm="syz.2.3240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec7bf75bd9 code=0x7fc00000 [ 976.464947][T15335] loop3: detected capacity change from 0 to 16 [ 976.486889][T15335] erofs: (device loop3): mounted with root inode @ nid 36. [ 976.502169][T15335] syz.3.3249: attempt to access beyond end of device [ 976.502169][T15335] loop3: rw=0, sector=3489784, nr_sectors = 8 limit=16 [ 976.591940][T15143] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 977.141076][T15349] ebt_among: dst integrity fail: 104 [ 977.238792][T15351] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 977.391380][T15353] netlink: 'syz.2.3259': attribute type 2 has an invalid length. [ 977.429191][T15355] tipc: Failed to obtain node identity [ 977.447361][T15355] tipc: Enabling of bearer rejected, failed to enable media [ 977.486432][T15333] loop1: detected capacity change from 0 to 32768 [ 977.586501][T15357] ERROR: (device loop1): diNewExt: no free extents [ 977.586501][T15357] [ 977.616285][T15357] ERROR: (device loop1): remounting filesystem as read-only [ 977.651435][T15357] ialloc: diAlloc returned -5! [ 977.963091][T15341] loop3: detected capacity change from 0 to 32768 [ 978.388077][T13341] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 978.398915][T13341] Bluetooth: hci4: Injecting HCI hardware error event [ 978.411234][T13341] Bluetooth: hci4: hardware error 0x00 [ 978.691983][T15377] Cannot find add_set index 0 as target [ 978.716611][T15376] loop2: detected capacity change from 0 to 2048 [ 978.822253][T15376] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 978.868893][T15381] ebt_among: dst integrity fail: 104 [ 978.885181][T15362] loop0: detected capacity change from 0 to 32768 [ 978.912451][T15384] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 978.987215][T15376] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3268: bg 0: block 234: padding at end of block bitmap is not set [ 979.042420][T15362] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 979.095126][T15376] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 117 [ 979.162064][T15376] EXT4-fs (loop2): This should not happen!! Data will be lost [ 979.162064][T15376] [ 979.328382][T15362] XFS (loop0): Ending clean mount [ 979.375117][T15362] XFS (loop0): Quotacheck needed: Please wait. [ 979.417547][T15392] loop4: detected capacity change from 0 to 4096 [ 979.434974][T15392] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 979.448964][T15147] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 979.479980][T15392] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 979.622453][T15403] 9pnet_fd: Insufficient options for proto=fd [ 979.633603][T15362] XFS (loop0): Quotacheck: Done. [ 979.642623][T15403] 9pnet_fd: Insufficient options for proto=fd [ 979.668534][T15392] ntfs3: loop4: ino=21, The size of extended attributes must not exceed 64KiB [ 979.680288][ T5152] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 979.835923][T15181] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 979.849373][ T58] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 979.892012][ T5152] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 979.928292][ T5110] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 979.929405][ T5152] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 979.940414][ T5110] Bluetooth: hci6: Injecting HCI hardware error event [ 979.961629][ T5107] Bluetooth: hci6: hardware error 0x00 [ 980.007480][ T5152] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 980.060210][ T58] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 980.077385][ T5152] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 980.087452][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.097204][ T5152] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.120368][ T58] usb 4-1: config 0 descriptor?? [ 980.129511][ T58] cp210x 4-1:0.0: cp210x converter detected [ 980.142220][ T5152] usb 2-1: config 0 descriptor?? [ 980.159892][T15399] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 980.267423][ T5190] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 980.485691][ T5190] usb 3-1: New USB device found, idVendor=0eb0, idProduct=3457, bcdDevice=31.92 [ 980.496958][ T5190] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.539566][ T58] cp210x 4-1:0.0: failed to get vendor val 0x370c size 13: -121 [ 980.555894][T13341] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 980.569407][ T5190] usb 3-1: config 0 descriptor?? [ 980.581456][ T58] cp210x 4-1:0.0: GPIO initialisation failed: -121 [ 980.596723][ T5190] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 980.614268][ T5152] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 980.623509][ T58] usb 4-1: cp210x converter now attached to ttyUSB0 [ 980.649246][ T5152] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 980.679566][ T5152] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 980.972368][ T46] usb 2-1: USB disconnect, device number 28 [ 981.323944][T15407] loop4: detected capacity change from 0 to 32768 [ 981.472844][ T5152] usb 4-1: USB disconnect, device number 26 [ 981.500680][ T5152] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 981.536301][ T5152] cp210x 4-1:0.0: device disconnected [ 981.667724][T13341] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 981.679034][T13341] Bluetooth: hci2: Injecting HCI hardware error event [ 981.690879][ T5110] Bluetooth: hci2: hardware error 0x00 [ 982.068941][ T5107] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 982.256191][T15421] loop1: detected capacity change from 0 to 256 [ 982.274947][T15421] FAT-fs (loop1): "posix" option is obsolete, not supported now [ 982.302149][T15421] FAT-fs (loop1): invalid media value (0x29) [ 982.324514][T15421] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 982.360002][T15421] FAT-fs (loop1): Can't find a valid FAT filesystem [ 982.521042][T15427] tipc: Failed to obtain node identity [ 982.539777][T15427] tipc: Enabling of bearer rejected, failed to enable media [ 982.705315][T15431] 9pnet_fd: Insufficient options for proto=fd [ 982.727204][T15431] 9pnet_fd: Insufficient options for proto=fd [ 982.916574][ T58] usb 3-1: USB disconnect, device number 26 [ 983.149214][T15440] loop3: detected capacity change from 0 to 4096 [ 983.208165][T15440] ntfs3: loop3: ino=3, Correct links count -> 2. [ 983.517827][ T29] audit: type=1326 audit(1720495846.086:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15432 comm="syz.1.3288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e96975bd9 code=0x7fc00000 [ 983.810749][ T5110] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 984.643675][T15471] loop3: detected capacity change from 0 to 256 [ 984.734068][T15471] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 984.785730][T15476] loop2: detected capacity change from 0 to 256 [ 984.867476][T15477] 9pnet: p9_errstr2errno: server reported unknown error ë [ 985.006437][T15480] netlink: 19 bytes leftover after parsing attributes in process `syz.0.3308'. [ 985.455883][T15492] loop2: detected capacity change from 0 to 164 [ 985.552691][T15492] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 985.586722][T15492] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 985.938395][ T29] audit: type=1400 audit(1720495848.506:633): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=15491 comm="syz.3.3314" [ 986.285823][ T5156] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 986.347291][ T5156] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 986.354771][ T5156] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 986.392765][T15507] loop4: detected capacity change from 0 to 256 [ 986.407275][ T5156] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 986.427142][ T5156] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 986.434609][ T5156] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 986.484005][ T5156] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 986.516229][ T5156] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 986.576224][ T5156] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 986.622054][ T5156] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 986.632717][T15507] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 986.665799][ T5156] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 986.692218][ T5156] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 986.797731][ T5190] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 987.140566][ T5190] usb 3-1: config 0 has no interfaces? [ 987.255879][T15510] loop0: detected capacity change from 0 to 512 [ 987.272926][ T5190] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 987.325060][ T5190] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.368384][ T5190] usb 3-1: config 0 descriptor?? [ 987.507271][ T5156] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 987.514751][ T5156] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 987.537155][ T5156] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 987.544632][ T5156] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 987.588387][ T5156] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 987.595885][ T5156] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 987.636835][T15510] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 987.655210][T15516] netlink: 19 bytes leftover after parsing attributes in process `syz.4.3323'. [ 987.661643][ T5156] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 987.695731][ T5156] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 987.724105][ T5156] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 987.757983][ T5156] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 987.790281][ T5156] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 987.817263][ T5155] usb 3-1: USB disconnect, device number 27 [ 987.858406][ T5156] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 987.865878][ T5156] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 987.918095][ T5156] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 987.935020][ T5156] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 987.957230][ T5156] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 987.964797][ T5156] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 988.001983][ T5156] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 988.062795][ T5156] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 988.116466][ T5156] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 988.266594][ T5156] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 988.538489][T15532] loop1: detected capacity change from 0 to 1764 [ 989.096637][T15534] loop4: detected capacity change from 0 to 164 [ 991.190307][T15534] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 991.222441][T15533] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 991.692198][T15543] misc userio: Begin command sent, but we're already running [ 991.941633][T15552] netlink: 19 bytes leftover after parsing attributes in process `syz.3.3336'. [ 993.074210][ T5190] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 993.109140][ T5190] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 993.116624][ T5190] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 993.163087][ T5190] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 993.191946][ T5190] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 993.218315][ T5190] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 993.225794][ T5190] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 993.294457][ T5190] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 993.315298][T15567] loop4: detected capacity change from 0 to 512 [ 993.344549][ T5190] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 993.367459][ T5184] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 993.386911][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.394015][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.417292][ T5190] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 993.426579][T15567] loop4: detected capacity change from 0 to 8 [ 993.461003][ T5190] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 993.641119][T15572] loop3: detected capacity change from 0 to 1764 [ 994.129983][T15567] squashfs image failed sanity check [ 994.273615][ T5190] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 994.286832][ T5190] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 994.296522][ T5190] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 994.305901][ T5190] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 994.313818][ T5190] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 994.321387][ T5190] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 994.329031][ T5190] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 994.336468][ T5190] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 994.344185][ T5190] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 994.351882][ T5190] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 994.359505][ T5190] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 994.387288][ T5190] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 994.394749][ T5190] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 994.427224][ T5184] usb 3-1: config 0 has no interfaces? [ 994.432791][ T5184] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 994.447210][ T5190] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 994.454817][ T5184] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.460421][T15576] loop3: detected capacity change from 0 to 64 [ 994.467220][ T5190] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 994.513025][ T5184] usb 3-1: config 0 descriptor?? [ 994.527161][ T5190] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 994.550958][ T5190] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 994.587179][ T5190] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 994.604949][ T5190] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 994.629062][ T5190] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 994.646752][ T5190] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 994.691340][ T5190] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 994.958613][ T5190] usb 3-1: USB disconnect, device number 28 [ 995.021353][T15584] netlink: 19 bytes leftover after parsing attributes in process `syz.3.3349'. [ 995.904377][T15563] loop1: detected capacity change from 0 to 32768 [ 995.963192][T15563] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/loop1": -EINTR [ 996.766031][T15602] loop2: detected capacity change from 0 to 1764 [ 997.526427][T15606] loop0: detected capacity change from 0 to 512 [ 997.565097][T15606] EXT4-fs: Ignoring removed nomblk_io_submit option [ 997.612870][T15610] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 997.643926][T15606] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 997.664541][T15606] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 997.678392][T15606] EXT4-fs (loop0): 1 truncate cleaned up [ 997.685792][T15606] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 998.253152][T15627] EXT4-fs error (device loop0): ext4_map_blocks:609: inode #2: block 4: comm syz.0.3357: lblock 0 mapped to illegal pblock 4 (length 1) [ 998.702327][T15627] EXT4-fs (loop0): Remounting filesystem read-only [ 998.879050][ T46] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 998.902020][T15181] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 999.448880][ T46] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 999.458090][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.511933][ T46] usb 5-1: config 0 descriptor?? [ 1000.190966][ T46] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 1000.271103][ T46] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1000.337346][ T46] [drm:udl_init] *ERROR* Selecting channel failed [ 1000.499747][T15642] netlink: 'syz.2.3368': attribute type 1 has an invalid length. [ 1000.521581][ T46] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 1000.549919][ T46] [drm] Initialized udl on minor 2 [ 1000.569766][T15624] loop1: detected capacity change from 0 to 32768 [ 1000.574877][ T46] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1000.609534][T15624] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3363 (15624) [ 1000.631565][ T46] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1000.658395][ T5156] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1000.667212][T15624] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1000.686230][T15624] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1000.695822][T15624] BTRFS info (device loop1): using free-space-tree [ 1000.698030][ T46] usb 5-1: USB disconnect, device number 22 [ 1000.725375][ T5156] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1000.769823][ T5156] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1000.999099][T15624] BTRFS error (device loop1): open_ctree failed [ 1001.488978][T15668] bridge_slave_1: left allmulticast mode [ 1001.494781][T15668] bridge_slave_1: left promiscuous mode [ 1001.501580][T15668] bridge0: port 2(bridge_slave_1) entered disabled state [ 1002.067614][T15667] fuse: Bad value for 'fd' [ 1002.259156][T15672] loop0: detected capacity change from 0 to 64 [ 1003.305644][T15694] hub 9-0:1.0: USB hub found [ 1003.319138][T15694] hub 9-0:1.0: 8 ports detected [ 1003.378209][T15696] loop1: detected capacity change from 0 to 164 [ 1003.407515][T15694] loop4: detected capacity change from 0 to 1764 [ 1006.105249][T15696] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 1006.173449][T15694] ISOFS: Logical zone size(2) < hardware blocksize(1024) [ 1006.187239][T15695] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 1006.292487][T15694] loop4: detected capacity change from 0 to 2048 [ 1006.367020][ T5156] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1006.398831][T15694] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1006.412020][T15694] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1006.613051][T15704] loop3: detected capacity change from 0 to 4096 [ 1006.766931][T15704] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 1006.933370][T15143] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1007.191205][T15714] bridge_slave_1: left allmulticast mode [ 1007.196996][T15714] bridge_slave_1: left promiscuous mode [ 1007.203927][T15714] bridge0: port 2(bridge_slave_1) entered disabled state [ 1008.336294][T15723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3391'. [ 1008.388568][T15723] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3391'. [ 1008.451048][T15735] capability: warning: `syz.3.3396' uses 32-bit capabilities (legacy support in use) [ 1008.587189][ T58] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1008.663033][T15739] loop3: detected capacity change from 0 to 4096 [ 1008.803741][ T58] usb 5-1: config 0 has an invalid interface number: 20 but max is 0 [ 1008.831100][ T58] usb 5-1: config 0 has no interface number 0 [ 1008.860069][ T58] usb 5-1: config 0 interface 20 altsetting 20 has 0 endpoint descriptors, different from the interface descriptor's value: 26 [ 1008.907159][ T58] usb 5-1: config 0 interface 20 has no altsetting 0 [ 1008.927223][ T58] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 1008.957294][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1008.988251][ T58] usb 5-1: config 0 descriptor?? [ 1009.223884][T15745] ebt_among: dst integrity fail: 104 [ 1009.247900][ T5156] usb 5-1: USB disconnect, device number 23 [ 1009.526320][T15749] loop2: detected capacity change from 0 to 512 [ 1009.564256][T15749] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1009.687691][T15749] EXT4-fs (loop2): 1 truncate cleaned up [ 1009.717775][T15749] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1009.867324][T15755] bridge_slave_1: left allmulticast mode [ 1009.873131][T15755] bridge_slave_1: left promiscuous mode [ 1009.879978][T15755] bridge0: port 2(bridge_slave_1) entered disabled state [ 1010.377234][ T5110] Bluetooth: hci3: command tx timeout [ 1010.720852][T15738] loop1: detected capacity change from 0 to 40427 [ 1010.730293][T15762] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3407'. [ 1010.781265][T15762] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3407'. [ 1010.784056][T15147] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1010.832417][T15758] loop0: detected capacity change from 0 to 4096 [ 1010.854458][T15758] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 1010.876872][T15738] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1011.071446][T15738] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1011.217815][T15178] syz-executor: attempt to access beyond end of device [ 1011.217815][T15178] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1011.299004][T15178] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1011.398193][T15781] loop0: detected capacity change from 0 to 512 [ 1011.405310][T15781] EXT4-fs: Ignoring removed oldalloc option [ 1011.411538][T15781] EXT4-fs: Ignoring removed bh option [ 1011.609902][T15785] loop2: detected capacity change from 0 to 1764 [ 1011.808213][T15781] EXT4-fs error (device loop0): __ext4_iget:4980: inode #11: block 1: comm syz.0.3413: invalid block [ 1012.177766][T15781] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz.0.3413: couldn't read orphan inode 11 (err -117) [ 1012.260472][T15781] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1012.413262][T15781] fuse: Unknown parameter 'roo€' [ 1012.650625][ T29] audit: type=1804 audit(1720495875.216:634): pid=15794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3416" name="/newroot/44/bus/file0" dev="overlay" ino=264 res=1 errno=0 [ 1013.750143][T15181] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1014.147302][T11013] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1014.225162][T15817] loop1: detected capacity change from 0 to 512 [ 1014.307330][T11013] usb 5-1: device descriptor read/64, error -71 [ 1014.358141][T15817] EXT4-fs (loop1): 1 truncate cleaned up [ 1014.376655][T15817] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1014.546172][T15817] ext4: Unknown parameter 'ñpDX&þï^xä²cÝÐÿSm_ÿîÿÁæþ_y¢ïÔ·_—Õß’çKdý¸žΟ©¿þ嶗\·¼9Ûò«½›' [ 1014.607225][T11013] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1015.457652][T11013] usb 5-1: device descriptor read/64, error -71 [ 1015.539065][T15178] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1015.591394][T11013] usb usb5-port1: attempt power cycle [ 1016.100338][T11013] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1016.926872][T11013] usb 5-1: device descriptor read/8, error -71 [ 1017.132357][T15839] loop4: detected capacity change from 0 to 128 [ 1017.184821][T15842] loop1: detected capacity change from 0 to 512 [ 1017.259630][T15842] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1017.330472][T15842] EXT4-fs (loop1): 1 truncate cleaned up [ 1017.366007][T15842] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1017.462429][T15837] loop0: detected capacity change from 0 to 4096 [ 1018.519562][T15178] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1019.198589][T15860] loop3: detected capacity change from 0 to 4096 [ 1019.327216][ T5151] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1020.345329][T15860] loop3: detected capacity change from 0 to 512 [ 1020.410513][ T5151] usb 5-1: config 0 has an invalid interface number: 20 but max is 0 [ 1020.427814][ T5151] usb 5-1: config 0 has no interface number 0 [ 1020.434702][ T5151] usb 5-1: config 0 interface 20 altsetting 20 has 0 endpoint descriptors, different from the interface descriptor's value: 26 [ 1020.450338][T15860] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 1020.452528][ T5151] usb 5-1: config 0 interface 20 has no altsetting 0 [ 1020.463803][T15860] EXT4-fs (loop3): mount failed [ 1020.463968][ T5151] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 1020.479484][ T5151] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.507781][ T5151] usb 5-1: config 0 descriptor?? [ 1020.696229][ T5105] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1020.726761][ T5105] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1020.753799][ T5105] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1020.888743][T15882] bridge_slave_1: left allmulticast mode [ 1020.894463][T15882] bridge_slave_1: left promiscuous mode [ 1020.900385][T15882] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.094522][ T5105] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1021.187081][ T5105] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1021.247111][T11013] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1021.315512][ T5105] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1021.602837][ T5105] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1021.757303][ T5155] usb 5-1: USB disconnect, device number 28 [ 1021.763581][ T5105] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1021.787190][ T5105] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1021.807363][ T5105] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1021.814802][ T5105] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1021.838273][ T5105] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1021.855528][T11013] usb 2-1: config 0 has no interfaces? [ 1021.861192][T11013] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1021.870425][ T5105] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1021.890943][ T5105] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1021.899520][T11013] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.917156][ T5105] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1021.939366][T11013] usb 2-1: config 0 descriptor?? [ 1021.948657][ T5105] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1021.978250][ T5105] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1021.980118][T15884] loop3: detected capacity change from 0 to 1024 [ 1021.999919][ T5105] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1022.039989][ T5105] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1022.083473][ T5105] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1022.114228][ T5105] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1022.133681][ T5105] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1022.174083][ T5105] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1022.207152][ T5105] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1022.260470][ T5105] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1022.275736][ T5105] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1022.296395][ T5105] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1022.330251][ T5105] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1022.377172][ T5105] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1022.400131][ T5154] usb 2-1: USB disconnect, device number 29 [ 1022.409979][ T5105] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1022.439291][ T5105] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1022.446778][ T5105] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1022.488942][ T5105] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1022.703767][T15897] mmap: syz.2.3449 (15897): VmData 175878144 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 1023.127581][ T5155] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1023.298448][T15910] loop2: detected capacity change from 0 to 164 [ 1023.393083][T15910] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 1023.451264][T15910] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 1024.146406][T15912] loop1: detected capacity change from 0 to 2048 [ 1024.167139][ T5155] usb 5-1: Using ep0 maxpacket: 32 [ 1024.174580][ T5155] usb 5-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice=e0.d8 [ 1024.183980][ T5155] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.199530][ T5155] usb 5-1: config 0 descriptor?? [ 1024.211295][ T5155] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input33 [ 1024.265293][T15912] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1024.567271][ T5154] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1024.715688][ T4531] bcm5974 5-1:0.0: could not read from device [ 1024.743483][ T4531] bcm5974 5-1:0.0: could not read from device [ 1024.750582][ T5155] usb 5-1: USB disconnect, device number 29 [ 1024.764950][ T5154] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 1024.779812][ T4531] bcm5974 5-1:0.0: could not read from device [ 1024.790296][ T5154] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.805795][ T5184] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1024.813139][ T5154] usb 3-1: config 0 descriptor?? [ 1024.824914][ T4531] bcm5974 5-1:0.0: could not read from device [ 1025.019787][ T5184] usb 2-1: config 0 has an invalid interface number: 20 but max is 0 [ 1025.038250][ T5184] usb 2-1: config 0 has no interface number 0 [ 1025.055217][ T5184] usb 2-1: config 0 interface 20 altsetting 20 has 0 endpoint descriptors, different from the interface descriptor's value: 26 [ 1025.076532][ T5184] usb 2-1: config 0 interface 20 has no altsetting 0 [ 1025.094068][ T5184] usb 2-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 1025.118400][ T5184] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.158846][ T5184] usb 2-1: config 0 descriptor?? [ 1025.987900][ T5154] ath6kl: Failed to submit usb control message: -110 [ 1025.994795][ T5154] ath6kl: unable to send the bmi data to the device: -110 [ 1026.058946][T15941] loop4: detected capacity change from 0 to 256 [ 1026.087274][ T5154] ath6kl: Unable to send get target info: -110 [ 1026.157286][T11013] usb 2-1: USB disconnect, device number 30 [ 1028.441052][T15956] loop3: detected capacity change from 0 to 128 [ 1028.587836][ T5154] ath6kl: Failed to init ath6kl core: -110 [ 1028.608797][T15961] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3469'. [ 1028.618560][ T5154] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1028.667259][ T5154] usb 3-1: USB disconnect, device number 29 [ 1028.684799][T15961] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3469'. [ 1028.727605][T15959] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3469'. [ 1029.331422][T15990] loop3: detected capacity change from 0 to 256 [ 1029.350055][ T5190] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1029.922611][ T5107] Bluetooth: hci1: command 0x0406 tx timeout [ 1029.931441][ T5190] usb 5-1: Using ep0 maxpacket: 32 [ 1030.067616][ T5190] usb 5-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice=e0.d8 [ 1030.077551][ T5190] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.101765][ T5190] usb 5-1: config 0 descriptor?? [ 1030.308595][ T5190] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input34 [ 1031.032218][ T4531] bcm5974 5-1:0.0: could not read from device [ 1031.054323][ T4531] bcm5974 5-1:0.0: could not read from device [ 1031.061533][ T5190] usb 5-1: USB disconnect, device number 30 [ 1031.070169][T16004] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3485'. [ 1031.090443][T16004] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3485'. [ 1031.141614][T15989] loop1: detected capacity change from 0 to 32768 [ 1031.154684][T16003] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3485'. [ 1031.184294][T15989] XFS (loop1): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 1031.306053][T15989] XFS (loop1): Ending clean mount [ 1031.462636][T16016] loop3: detected capacity change from 0 to 128 [ 1031.473955][T15178] XFS (loop1): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 1032.435731][T16035] loop3: detected capacity change from 0 to 512 [ 1032.482790][T16035] EXT4-fs (loop3): 1 truncate cleaned up [ 1032.504760][T16035] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1032.580729][T16035] ext4: Unknown parameter 'ñpDX&þï^xä²cÝÐÿSm_ÿîÿÁæþ_y¢ïÔ·_—Õß’çKdý¸žΟ©¿þ嶗\·¼9Ûò«½›' [ 1032.627379][ T5190] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1032.769895][T16023] loop1: detected capacity change from 0 to 65536 [ 1032.935325][T16023] XFS (loop1): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 1033.187250][ T5190] usb 3-1: Using ep0 maxpacket: 16 [ 1033.461197][ T5190] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1033.474847][ T5190] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=59.31 [ 1033.511599][ T5190] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.532260][ T5190] usb 3-1: Product: syz [ 1033.532944][T16023] XFS (loop1): Ending clean mount [ 1033.536477][ T5190] usb 3-1: Manufacturer: syz [ 1033.575224][ T5190] usb 3-1: SerialNumber: syz [ 1033.599407][ T5190] usb 3-1: config 0 descriptor?? [ 1033.629082][ T5190] usb 3-1: no audio or video endpoints found [ 1033.635578][ T5190] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1033.787369][T16023] XFS (loop1): Quotacheck needed: Please wait. [ 1033.793548][T15156] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1034.028887][T16023] XFS (loop1): Quotacheck: Done. [ 1034.078180][ T5184] usb 3-1: USB disconnect, device number 30 [ 1035.684831][T15178] XFS (loop1): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 1035.841236][T16065] loop2: detected capacity change from 0 to 128 [ 1036.987163][T16057] loop3: detected capacity change from 0 to 32768 [ 1037.112784][T16057] XFS (loop3): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 1037.215128][T16090] loop4: detected capacity change from 0 to 512 [ 1037.222554][T16087] loop0: detected capacity change from 0 to 1024 [ 1037.279955][T16090] EXT4-fs: old and new quota format mixing [ 1037.484691][T16057] XFS (loop3): Ending clean mount [ 1037.583153][T15156] XFS (loop3): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 1037.754008][T16101] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3514'. [ 1037.787249][T16101] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3514'. [ 1039.075687][T16122] loop0: detected capacity change from 0 to 4096 [ 1039.113010][T16129] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1039.331385][T16126] loop1: detected capacity change from 0 to 4096 [ 1039.442719][T16139] loop4: detected capacity change from 0 to 1024 [ 1039.709265][T16141] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3527'. [ 1039.748092][T16141] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3527'. [ 1039.857258][ T5190] usb 2-1: new low-speed USB device number 31 using dummy_hcd [ 1040.071003][ T5190] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=37.c2 [ 1040.091438][ T5190] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.121204][ T5190] usb 2-1: config 0 descriptor?? [ 1040.145005][ T5190] usbtest 2-1:0.0: Linux user mode test driver [ 1040.161541][ T5190] usbtest 2-1:0.0: low-speed {control} tests [ 1040.203081][T16153] loop0: detected capacity change from 0 to 128 [ 1040.279593][T16153] qnx6: unable to read the first superblock [ 1040.404751][ T5156] usb 2-1: USB disconnect, device number 31 [ 1040.819558][T16170] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3540'. [ 1040.861593][T16172] loop3: detected capacity change from 0 to 1024 [ 1040.862457][T16170] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3540'. [ 1041.338012][ T5184] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1041.554920][ T5184] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1041.593816][ T5184] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1041.629991][ T5184] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1041.657577][T16198] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3552'. [ 1041.658499][ T5184] usb 5-1: config 0 descriptor?? [ 1041.666527][T16198] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3552'. [ 1041.911414][T16204] loop2: detected capacity change from 0 to 1024 [ 1042.120629][ T5184] keytouch 0003:0926:3333.000D: fixing up Keytouch IEC report descriptor [ 1042.163495][ T5184] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.000D/input/input35 [ 1042.440229][ T5184] keytouch 0003:0926:3333.000D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 1042.502802][T16211] loop0: detected capacity change from 0 to 256 [ 1042.506743][ T5184] usb 5-1: USB disconnect, device number 31 [ 1042.785368][T16217] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3558'. [ 1043.544073][T16215] loop2: detected capacity change from 0 to 4096 [ 1043.835665][ C1] vkms_vblank_simulate: vblank timer overrun [ 1044.763600][T16240] loop4: detected capacity change from 0 to 65536 [ 1044.837326][ T5190] usb 3-1: new low-speed USB device number 31 using dummy_hcd [ 1044.927947][T16240] XFS (loop4): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 1044.983936][T16240] XFS (loop4): Ending clean mount [ 1045.018984][T16240] XFS (loop4): Quotacheck needed: Please wait. [ 1045.047840][ T5190] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=37.c2 [ 1045.058164][ T5190] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.069265][ T5190] usb 3-1: config 0 descriptor?? [ 1045.077659][ T5190] usbtest 3-1:0.0: Linux user mode test driver [ 1045.099247][ T5190] usbtest 3-1:0.0: low-speed {control} tests [ 1045.162781][T16240] XFS (loop4): Quotacheck: Done. [ 1045.394404][ T5154] usb 3-1: USB disconnect, device number 31 [ 1045.880617][ T5151] usb 4-1: new low-speed USB device number 28 using dummy_hcd [ 1046.228843][ T5151] usb 4-1: Invalid ep0 maxpacket: 64 [ 1046.397222][ T5151] usb 4-1: new low-speed USB device number 29 using dummy_hcd [ 1046.603891][ T5151] usb 4-1: Invalid ep0 maxpacket: 64 [ 1046.625886][ T5151] usb usb4-port1: attempt power cycle [ 1046.654140][T15143] XFS (loop4): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 1046.812629][T16267] loop2: detected capacity change from 0 to 256 [ 1047.177405][ T5151] usb 4-1: new low-speed USB device number 30 using dummy_hcd [ 1047.256885][ T5151] usb 4-1: Invalid ep0 maxpacket: 64 [ 1047.496596][ T5151] usb 4-1: new low-speed USB device number 31 using dummy_hcd [ 1047.791237][ T5151] usb 4-1: Invalid ep0 maxpacket: 64 [ 1047.810772][ T5151] usb usb4-port1: unable to enumerate USB device [ 1048.057153][ T5154] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1048.272592][ T5154] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1048.297213][ T5154] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1048.327372][ T5154] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.354938][ T5154] usb 2-1: config 0 descriptor?? [ 1048.783116][ T5154] keytouch 0003:0926:3333.000E: fixing up Keytouch IEC report descriptor [ 1048.834501][ T5154] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000E/input/input36 [ 1048.880621][T16293] loop3: detected capacity change from 0 to 4096 [ 1049.077608][ T5154] keytouch 0003:0926:3333.000E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 1049.113034][ T5154] usb 2-1: USB disconnect, device number 32 [ 1049.217870][T16299] loop2: detected capacity change from 0 to 4096 [ 1049.270606][T16301] loop4: detected capacity change from 0 to 2048 [ 1049.287575][T16302] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1049.320604][T16301] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 1049.347844][T16301] UDF-fs: Scanning with blocksize 512 failed [ 1049.378904][T16301] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 129: 0x7d != 0x7e [ 1049.399207][ T5184] usb 4-1: new low-speed USB device number 32 using dummy_hcd [ 1049.418412][T16301] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1049.598155][ T5184] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=37.c2 [ 1049.627492][ T5184] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.648761][ T5184] usb 4-1: config 0 descriptor?? [ 1049.671925][ T5184] usbtest 4-1:0.0: Linux user mode test driver [ 1049.697190][ T5184] usbtest 4-1:0.0: low-speed {control} tests [ 1049.908045][ T5184] usb 4-1: USB disconnect, device number 32 [ 1050.140398][T16326] sctp: [Deprecated]: syz.4.3601 (pid 16326) Use of int in max_burst socket option deprecated. [ 1050.140398][T16326] Use struct sctp_assoc_value instead [ 1050.220975][T16322] pim6reg1: entered promiscuous mode [ 1050.226349][T16322] pim6reg1: entered allmulticast mode [ 1050.334257][T16328] loop0: detected capacity change from 0 to 1024 [ 1050.498787][T16330] xt_bpf: check failed: parse error [ 1051.080416][T16328] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1051.402806][T16343] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3604'. [ 1051.450357][T16343] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3604'. [ 1051.467641][T16340] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3604'. [ 1051.592209][T15181] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1051.631813][ T5154] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1052.049895][ T5154] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1052.157840][ T5154] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1052.334966][ T5154] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.598665][ T5154] usb 5-1: config 0 descriptor?? [ 1052.689592][T16361] pim6reg1: entered promiscuous mode [ 1052.736723][ T5155] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1052.745712][T16361] pim6reg1: entered allmulticast mode [ 1052.791478][ T5155] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1052.824560][ T5155] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1052.861644][ T5155] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1053.105335][ T5154] keytouch 0003:0926:3333.0010: fixing up Keytouch IEC report descriptor [ 1053.125155][ T5155] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1053.161608][ T5155] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1053.183147][ T5154] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0010/input/input37 [ 1053.228149][ T5155] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1053.963422][T16379] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.3620'. [ 1053.981412][T16379] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.3620'. [ 1053.995708][T16378] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.3620'. [ 1054.147333][ T5151] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1054.203174][ T5105] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1054.210958][ T5155] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1054.247312][ T5155] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1054.254888][ T5155] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1054.277163][ T5155] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1054.284648][ T5155] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1054.308062][ T5155] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1054.317311][ T5155] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1054.347131][ T5155] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1054.356303][ T5155] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1054.358061][ T5151] usb 2-1: Using ep0 maxpacket: 32 [ 1054.391696][ T5154] keytouch 0003:0926:3333.0010: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 1054.401395][ T5151] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1054.420453][ T5155] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1054.429162][ T5105] usb 3-1: Using ep0 maxpacket: 16 [ 1054.438432][ T5151] usb 2-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 1054.452251][ T5155] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1054.452412][ T5105] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 1054.468856][ T5155] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1054.497888][ T5154] usb 5-1: USB disconnect, device number 32 [ 1054.503884][ T5155] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1054.517097][ T5105] usb 3-1: config 0 has no interface number 0 [ 1054.519377][ T5151] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.527129][ T5155] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1054.553807][ T5105] usb 3-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 1054.576139][ T5155] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1054.588048][ T5105] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.594818][ T5151] usb 2-1: config 0 descriptor?? [ 1054.607612][ T5155] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1054.617083][ T5105] usb 3-1: Product: syz [ 1054.622164][T16389] loop4: detected capacity change from 0 to 2048 [ 1054.644117][T16392] loop3: detected capacity change from 0 to 128 [ 1054.652472][ T5105] usb 3-1: Manufacturer: syz [ 1054.657304][ T5155] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1054.664745][ T5155] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1054.672327][T16389] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 1054.676731][ T5105] usb 3-1: SerialNumber: syz [ 1054.700570][T16392] qnx6: unable to read the first superblock [ 1054.711388][T16389] UDF-fs: Scanning with blocksize 512 failed [ 1054.718097][ T5105] usb 3-1: config 0 descriptor?? [ 1054.732874][ T5155] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1054.760802][T16389] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 129: 0x7d != 0x7e [ 1054.762847][ T5105] as10x_usb: device has been detected [ 1054.787361][ T5155] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1054.794920][ T5155] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1054.798365][T16389] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1054.828117][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.837402][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.848250][ T5105] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 1054.868907][ T5155] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1054.897376][ T5155] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1054.927345][ T5155] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1054.947246][ T5155] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1054.971375][ T5105] usb 3-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 1054.984459][ T5155] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1055.007284][ T5155] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1055.041966][ T5155] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1055.063744][ T5151] hid-rmi 0003:0461:4E72.0011: item fetching failed at offset 2/5 [ 1055.067113][ T5155] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1055.094999][ T5155] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1055.099290][ T5151] hid-rmi 0003:0461:4E72.0011: parse failed [ 1055.105368][ T5105] as10x_usb: error during firmware upload part1 [ 1055.130973][ T5151] hid-rmi 0003:0461:4E72.0011: probe with driver hid-rmi failed with error -22 [ 1055.133458][ T5155] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1055.147863][ T5105] Registered device Sky IT Digital Key (green led) [ 1055.171148][ T5155] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1055.218337][ T5155] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1055.239443][ T5155] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1055.265586][ T5151] usb 2-1: USB disconnect, device number 33 [ 1055.313304][ T5155] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1055.347344][ T5155] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1055.399382][ T5190] usb 3-1: USB disconnect, device number 32 [ 1055.405744][ T5155] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1055.455023][T16395] loop0: detected capacity change from 0 to 512 [ 1055.497722][T16395] EXT4-fs (loop0): filesystem is read-only [ 1055.540140][ T5190] Unregistered device Sky IT Digital Key (green led) [ 1055.552620][ T5190] as10x_usb: device has been disconnected [ 1055.689137][T16400] ptrace attach of "./syz-executor exec"[15181] was attempted by "./syz-executor exec"[16400] [ 1055.928894][T16404] futex_wake_op: syz.3.3631 tries to shift op by 32; fix this program [ 1056.076354][T16406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3632'. [ 1057.456942][T16425] loop1: detected capacity change from 0 to 256 [ 1057.474782][T16411] loop2: detected capacity change from 0 to 512 [ 1057.482333][T16425] exfat: Deprecated parameter 'utf8' [ 1057.498959][T16411] EXT4-fs: Ignoring removed orlov option [ 1057.504683][T16411] ext4: Unknown parameter 'fsmagic' [ 1057.639622][T16425] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xc61f63e4, utbl_chksum : 0xe619d30d) [ 1057.756779][T16435] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3642'. [ 1057.781666][T16435] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3642'. [ 1057.817776][T16434] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3642'. [ 1057.936989][T16439] loop1: detected capacity change from 0 to 512 [ 1057.963598][T16439] EXT4-fs (loop1): filesystem is read-only [ 1057.969813][T16437] loop0: detected capacity change from 0 to 1764 [ 1057.998621][T16443] sctp: [Deprecated]: syz.2.3646 (pid 16443) Use of int in max_burst socket option deprecated. [ 1057.998621][T16443] Use struct sctp_assoc_value instead [ 1058.039501][ T58] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1058.043618][T16445] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3647'. [ 1058.046951][ T58] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1058.094003][ T58] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1058.127850][ T58] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1058.135834][ T58] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1058.349443][T16447] ptrace attach of "./syz-executor exec"[15178] was attempted by "./syz-executor exec"[16447] [ 1058.349640][ T58] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1058.371321][ T58] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1058.380591][ T58] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1058.390693][ T58] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1059.087234][ T5190] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1059.111448][ T58] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1059.310336][ T58] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1059.318236][ T58] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1059.330167][ T58] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1059.343838][ T58] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1060.181876][ T58] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1060.189852][ T58] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1060.199506][ T58] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1060.209902][ T58] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1060.217942][ T58] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1060.226757][ T58] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1060.255591][ T58] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1060.277322][ T5190] usb 5-1: Using ep0 maxpacket: 16 [ 1060.302422][ T58] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1060.324749][ T5190] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1060.354424][ T58] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1060.363325][ T5190] usb 5-1: config 0 has no interface number 0 [ 1060.397938][ T5190] usb 5-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 1060.407794][ T58] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1060.428042][ T5190] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.436315][ T58] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1060.444162][ T5190] usb 5-1: Product: syz [ 1060.459991][ T5190] usb 5-1: Manufacturer: syz [ 1060.465119][ T58] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1060.487160][ T5190] usb 5-1: SerialNumber: syz [ 1060.504195][ T58] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1060.518758][ T5190] usb 5-1: config 0 descriptor?? [ 1060.552801][ T58] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1060.562299][ T5190] as10x_usb: device has been detected [ 1060.570309][ T58] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1060.585192][T16465] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 1060.596101][ T5190] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 1060.610709][T16465] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 1060.614948][ T58] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1060.650600][ T58] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1060.677730][ T58] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1060.686652][ T5190] usb 5-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 1060.706880][ T58] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1060.732296][ T5190] as10x_usb: error during firmware upload part1 [ 1060.766551][ T58] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1060.788344][T16471] loop3: detected capacity change from 0 to 16 [ 1060.797762][ T5190] Registered device Sky IT Digital Key (green led) [ 1060.800243][ T58] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1060.800841][T16472] loop0: detected capacity change from 0 to 256 [ 1060.832087][ T58] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1060.853020][ T58] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1060.856968][T16471] erofs: (device loop3): erofs_read_inode: unsupported datalayout 5 of nid 36 [ 1060.866156][ T58] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1060.912963][ T58] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1060.918977][T16472] exfat: Deprecated parameter 'utf8' [ 1060.956961][T16472] exfat: Bad value for 'gid' [ 1061.017306][ T58] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1061.033053][ T58] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1061.059306][ T58] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1061.084770][ T58] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1061.104843][T16474] loop1: detected capacity change from 0 to 1024 [ 1061.138078][ T58] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1061.156693][T16474] EXT4-fs: Ignoring removed orlov option [ 1061.231068][T16474] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1061.279206][ T5105] usb 5-1: USB disconnect, device number 33 [ 1061.309031][T16482] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3659'. [ 1061.324724][T16485] loop2: detected capacity change from 0 to 1764 [ 1061.386045][ T5105] Unregistered device Sky IT Digital Key (green led) [ 1061.398339][ T5105] as10x_usb: device has been disconnected [ 1061.565211][T15178] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1062.617507][T16493] loop3: detected capacity change from 0 to 512 [ 1062.627210][ T5110] Bluetooth: hci0: command tx timeout [ 1062.638496][T16493] EXT4-fs: Ignoring removed orlov option [ 1062.653340][T16493] ext4: Unknown parameter 'fsmagic' [ 1063.077381][T16509] loop1: detected capacity change from 0 to 1024 [ 1063.099148][T16509] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 1063.117746][T16509] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1063.159669][T16509] EXT4-fs (loop1): invalid journal inode [ 1063.179286][T16509] EXT4-fs (loop1): can't get journal size [ 1063.203295][T16511] loop4: detected capacity change from 0 to 256 [ 1063.206186][T16509] EXT4-fs error (device loop1): ext4_protect_reserved_inode:182: inode #2: comm syz.1.3667: blocks 48-48 from inode overlap system zone [ 1063.238115][T16511] exfat: Deprecated parameter 'utf8' [ 1063.263335][T16509] EXT4-fs (loop1): failed to initialize system zone (-117) [ 1063.326241][T16509] EXT4-fs (loop1): mount failed [ 1063.337730][T16511] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xc61f63e4, utbl_chksum : 0xe619d30d) [ 1063.534050][T16518] loop0: detected capacity change from 0 to 2048 [ 1063.544524][T16522] loop3: detected capacity change from 0 to 128 [ 1063.563921][T16522] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1063.599856][T16522] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1063.608787][T16509] loop1: detected capacity change from 0 to 4096 [ 1063.636756][T16518] Dev loop0: RDB in block 1 has bad checksum [ 1063.675910][T16525] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1063.873014][ T58] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1063.911759][ T58] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1063.941078][ T58] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1063.970141][ T58] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1063.995230][ T58] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1064.067521][ T58] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1064.929395][ T58] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1064.939717][ T58] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1064.948014][ T58] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1064.955468][ T58] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1064.963979][ T58] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1064.971526][ T58] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1064.979166][ T58] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1064.986619][ T58] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1064.994492][ T58] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1065.002109][ T5151] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1065.009966][ T58] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1065.035937][ T58] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1065.045739][ T58] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1065.053261][ T58] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1065.061417][ T58] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1065.068958][ T58] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1065.076406][ T58] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1065.084026][ T58] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1065.089183][T16548] netlink: 'syz.4.3681': attribute type 11 has an invalid length. [ 1065.092518][ T58] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1065.106834][ T58] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1065.116331][ T58] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1065.132911][ T58] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1065.207208][ T5151] usb 3-1: Using ep0 maxpacket: 16 [ 1065.320432][T16548] netlink: 210876 bytes leftover after parsing attributes in process `syz.4.3681'. [ 1065.357648][ T58] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1065.383955][ T5151] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 1065.441301][ T5151] usb 3-1: config 0 has no interface number 0 [ 1065.448110][ T58] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1065.558502][ T5151] usb 3-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 1065.571164][ T58] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1065.603852][ T58] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1065.617572][ T5151] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.625864][ T58] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1065.634323][ T5151] usb 3-1: Product: syz [ 1065.638784][ T5151] usb 3-1: Manufacturer: syz [ 1065.643662][ T58] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1065.651312][ T5151] usb 3-1: SerialNumber: syz [ 1065.657222][ T58] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1065.665264][ T58] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1065.674061][ T5151] usb 3-1: config 0 descriptor?? [ 1065.684805][ T5151] as10x_usb: device has been detected [ 1065.711067][ T58] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1065.722454][ T5151] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 1065.740215][ T58] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1065.764915][ T58] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1065.802203][ T5151] usb 3-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 1065.822140][ T58] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1065.843910][T16559] loop4: detected capacity change from 0 to 256 [ 1065.849947][ T58] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1065.895455][ T5151] as10x_usb: error during firmware upload part1 [ 1065.911677][ T58] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1065.929030][T16559] exfat: Deprecated parameter 'utf8' [ 1065.939502][ T5151] Registered device Sky IT Digital Key (green led) [ 1065.945835][ T58] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1065.999822][ T58] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1066.047897][ T58] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1066.055441][T16559] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xc61f63e4, utbl_chksum : 0xe619d30d) [ 1066.066536][T16560] loop0: detected capacity change from 0 to 4096 [ 1066.102986][ T5190] usb 3-1: USB disconnect, device number 33 [ 1066.195381][ T5190] Unregistered device Sky IT Digital Key (green led) [ 1066.209096][ T5190] as10x_usb: device has been disconnected [ 1066.410947][T16565] SET target dimension over the limit! [ 1066.415641][T16566] loop1: detected capacity change from 0 to 128 [ 1066.457738][T16566] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1066.501405][T16566] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1067.470904][T16596] loop1: detected capacity change from 0 to 256 [ 1067.534037][T16598] SET target dimension over the limit! [ 1067.555862][T16600] loop3: detected capacity change from 0 to 128 [ 1067.664489][T16596] FAT-fs (loop1): Directory bread(block 64) failed [ 1067.697338][T16596] FAT-fs (loop1): Directory bread(block 65) failed [ 1067.698742][T16600] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1067.704087][T16596] FAT-fs (loop1): Directory bread(block 66) failed [ 1067.727506][T16600] ext4 filesystem being mounted at /108/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1067.765729][T16596] FAT-fs (loop1): Directory bread(block 67) failed [ 1067.772968][T16596] FAT-fs (loop1): Directory bread(block 68) failed [ 1067.780283][T16596] FAT-fs (loop1): Directory bread(block 69) failed [ 1067.788106][T16596] FAT-fs (loop1): Directory bread(block 70) failed [ 1067.794650][T16596] FAT-fs (loop1): Directory bread(block 71) failed [ 1067.802278][T16596] FAT-fs (loop1): Directory bread(block 72) failed [ 1067.811543][T16596] FAT-fs (loop1): Directory bread(block 73) failed [ 1068.242996][T15156] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1068.247233][ T58] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1068.547218][ T58] usb 3-1: Using ep0 maxpacket: 32 [ 1068.558730][T16618] loop0: detected capacity change from 0 to 512 [ 1068.584719][ T58] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1068.641434][T16618] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1068.656742][ T58] usb 3-1: New USB device found, idVendor=10cf, idProduct=8064, bcdDevice=98.7c [ 1068.705482][ T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.767966][ T58] usb 3-1: config 0 descriptor?? [ 1068.792009][T16618] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #12: comm syz.0.3706: corrupted in-inode xattr: invalid ea_ino [ 1068.821513][T16618] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz.0.3706: couldn't read orphan inode 12 (err -117) [ 1068.858662][T16618] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1068.888722][ T58] vmk80xx 3-1:0.0: driver 'vmk80xx' failed to auto-configure device. [ 1069.815651][T16655] loop3: detected capacity change from 0 to 256 [ 1069.884498][T16655] FAT-fs (loop3): Directory bread(block 64) failed [ 1069.904640][T16655] FAT-fs (loop3): Directory bread(block 65) failed [ 1069.934455][T16655] FAT-fs (loop3): Directory bread(block 66) failed [ 1069.952473][T16655] FAT-fs (loop3): Directory bread(block 67) failed [ 1069.975412][T16655] FAT-fs (loop3): Directory bread(block 68) failed [ 1070.012585][T16655] FAT-fs (loop3): Directory bread(block 69) failed [ 1070.027359][T16655] FAT-fs (loop3): Directory bread(block 70) failed [ 1070.048924][T16655] FAT-fs (loop3): Directory bread(block 71) failed [ 1070.067696][T15181] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 1070.130386][T16655] FAT-fs (loop3): Directory bread(block 72) failed [ 1070.160587][T16655] FAT-fs (loop3): Directory bread(block 73) failed [ 1070.280584][T16661] loop1: detected capacity change from 0 to 16 [ 1070.347290][T16661] erofs: (device loop1): erofs_read_inode: unsupported datalayout 5 of nid 36 [ 1070.479439][T16665] loop4: detected capacity change from 0 to 1764 [ 1070.529795][T16665] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1070.790691][T16613] Process accounting resumed [ 1070.816864][ T5156] usb 3-1: USB disconnect, device number 34 [ 1071.135354][T16680] syz.3.3729[16680] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1071.135533][T16680] syz.3.3729[16680] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1072.094223][T16681] loop4: detected capacity change from 0 to 512 [ 1072.176282][T16681] EXT4-fs (loop4): filesystem is read-only [ 1072.380000][T16694] ptrace attach of "./syz-executor exec"[15143] was attempted by "./syz-executor exec"[16694] [ 1072.387217][ T58] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1072.419495][T16696] netlink: 'syz.0.3737': attribute type 11 has an invalid length. [ 1072.436549][T16696] netlink: 210876 bytes leftover after parsing attributes in process `syz.0.3737'. [ 1072.549147][T16698] loop3: detected capacity change from 0 to 16 [ 1072.603845][ T58] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1072.615269][T16698] erofs: (device loop3): erofs_read_inode: unsupported datalayout 5 of nid 36 [ 1072.635095][ T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.655740][ T58] usb 3-1: config 0 descriptor?? [ 1072.717868][ T58] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1072.957731][T16711] loop1: detected capacity change from 0 to 1024 [ 1072.966626][T16711] hfsplus: unable to parse mount options [ 1073.109811][ T58] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 1073.297380][ T5105] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1073.497218][ T5105] usb 2-1: Using ep0 maxpacket: 8 [ 1073.505282][ T5105] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 1073.515407][ T5105] usb 2-1: config 0 has no interface number 0 [ 1073.530737][ T5105] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 1073.554593][ T5105] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.579581][ T5105] usb 2-1: config 0 descriptor?? [ 1073.833712][ T5105] viperboard 2-1:0.143: version 0.00 found at bus 002 address 034 [ 1073.887242][ T5105] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 1073.896015][ T5105] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 1074.698590][ T5105] usb 2-1: USB disconnect, device number 34 [ 1074.795379][ T58] gspca_cpia1: usb_control_msg 03, error -71 [ 1074.804055][ T58] cpia1 3-1:0.0: unexpected systemstate: 00 [ 1074.820115][ T58] usb 3-1: USB disconnect, device number 35 [ 1074.957228][T16745] loop1: detected capacity change from 0 to 256 [ 1074.991474][T16741] loop4: detected capacity change from 0 to 512 [ 1075.008247][T16742] sock: sock_set_timeout: `syz.2.3753' (pid 16742) tries to set negative timeout [ 1075.033263][T16741] EXT4-fs (loop4): filesystem is read-only [ 1075.038930][T16745] exFAT-fs (loop1): error, invalid access to FAT (entry 0x00000005) bogus content (0xffff0003) [ 1075.086547][T16745] exFAT-fs (loop1): Filesystem has been set read-only [ 1075.113050][T16745] exFAT-fs (loop1): failed to load upcase table [ 1075.133601][T16745] exFAT-fs (loop1): failed to recognize exfat type [ 1075.241632][T16749] ptrace attach of "./syz-executor exec"[15143] was attempted by "./syz-executor exec"[16749] [ 1077.587164][ T5190] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1077.827204][ T5190] usb 3-1: Using ep0 maxpacket: 32 [ 1077.848533][ T5190] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1077.902274][ T5190] usb 3-1: New USB device found, idVendor=10cf, idProduct=8064, bcdDevice=98.7c [ 1077.975996][ T5190] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1078.015825][ T5190] usb 3-1: config 0 descriptor?? [ 1078.067658][ T5190] vmk80xx 3-1:0.0: driver 'vmk80xx' failed to auto-configure device. [ 1078.077312][T16814] netlink: 'syz.4.3779': attribute type 1 has an invalid length. [ 1079.928933][T16793] loop1: detected capacity change from 0 to 32768 [ 1080.087402][T16836] netlink: 277 bytes leftover after parsing attributes in process `syz.4.3785'. [ 1080.559958][T16790] Process accounting resumed [ 1080.588256][ T58] usb 3-1: USB disconnect, device number 36 [ 1082.385901][T16893] loop2: detected capacity change from 0 to 512 [ 1082.403193][T16893] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 1083.206017][T16890] loop4: detected capacity change from 0 to 512 [ 1083.237371][T16890] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1083.541647][T16890] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #15: comm syz.4.3807: iget: bad i_size value: -67835469387268086 [ 1083.757933][T16903] loop0: detected capacity change from 0 to 2048 [ 1084.457621][T16890] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.3807: couldn't read orphan inode 15 (err -117) [ 1084.538565][T16890] EXT4-fs (loop4): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1084.565961][T16890] ext2 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1084.616164][T16907] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3812'. [ 1085.878745][T15143] EXT4-fs (loop4): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 1086.320480][T16923] loop0: detected capacity change from 0 to 8192 [ 1086.367228][T16923] REISERFS warning (device loop0): super-6503 reiserfs_getopt: the option "expose_privroot" does not require an argument [ 1086.367228][T16923] [ 1086.500030][ T5151] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1086.558006][T16935] loop2: detected capacity change from 0 to 2048 [ 1086.633626][T16935] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1086.714475][ T5151] usb 4-1: Using ep0 maxpacket: 8 [ 1086.730034][ T5151] usb 4-1: New USB device found, idVendor=20a6, idProduct=1105, bcdDevice=c2.eb [ 1086.739079][T16937] ebt_limit: overflow, try lower: 12058624/0 [ 1086.760554][ T5151] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.794654][ T5151] usb 4-1: Product: syz [ 1086.811192][ T5151] usb 4-1: Manufacturer: syz [ 1086.815882][ T5151] usb 4-1: SerialNumber: syz [ 1086.853366][ T5151] usb 4-1: config 0 descriptor?? [ 1086.869676][ T5151] usb 4-1: bad CDC descriptors [ 1086.890537][ T5151] option 4-1:0.0: GSM modem (1-port) converter detected [ 1086.993187][T16943] loop2: detected capacity change from 0 to 64 [ 1087.124739][T16927] loop4: detected capacity change from 0 to 32768 [ 1087.134009][T16930] loop3: detected capacity change from 0 to 1024 [ 1087.144636][T16927] btrfs: Deprecated parameter 'usebackuproot' [ 1087.165148][T16930] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1087.175832][T16927] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1087.186755][T16930] JBD2: no valid journal superblock found [ 1087.193797][T16927] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3819 (16927) [ 1087.207329][T16930] EXT4-fs (loop3): Could not load journal inode [ 1087.243732][T16927] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1087.274537][T16927] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1087.287293][ T5152] usb 4-1: USB disconnect, device number 33 [ 1087.298031][ T5152] option 4-1:0.0: device disconnected [ 1087.315807][T16927] BTRFS info (device loop4): disk space caching is enabled [ 1087.478048][T16927] BTRFS error (device loop4 state M): cannot disable free-space-tree [ 1087.599386][T15143] BTRFS info (device loop4 state M): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1088.209818][T16983] loop0: detected capacity change from 0 to 64 [ 1088.345396][T16945] loop1: detected capacity change from 0 to 32768 [ 1088.363364][T16945] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3830 (16945) [ 1088.415039][T16945] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 1088.470124][T16945] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 1088.505286][T16945] BTRFS info (device loop1): using free-space-tree [ 1089.049117][T17015] loop3: detected capacity change from 0 to 2048 [ 1090.048732][T17024] netlink: 'syz.2.3851': attribute type 4 has an invalid length. [ 1090.970329][T15178] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 1091.677547][T17030] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3853'. [ 1091.878347][T17033] loop0: detected capacity change from 0 to 64 [ 1092.065701][T17022] loop3: detected capacity change from 0 to 32768 [ 1092.239101][T17037] loop0: detected capacity change from 0 to 2048 [ 1092.291287][T17042] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1092.454157][T17044] loop2: detected capacity change from 0 to 2048 [ 1092.479047][T17039] loop4: detected capacity change from 0 to 8192 [ 1092.501411][T17039] REISERFS warning (device loop4): super-6503 reiserfs_getopt: the option "expose_privroot" does not require an argument [ 1092.501411][T17039] [ 1092.532475][T17044] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1093.024744][T17052] loop4: detected capacity change from 0 to 8 [ 1093.045652][T17054] nicvf0: tun_chr_ioctl cmd 35111 [ 1093.065527][T17052] unable to read xattr id index table [ 1093.328234][T13453] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.519723][T13453] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.681765][T17064] loop3: detected capacity change from 0 to 16 [ 1093.693128][T17064] erofs: (device loop3): mounted with root inode @ nid 36. [ 1093.748260][T13453] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.076365][T13453] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.431314][ T5107] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1094.448166][ T5107] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1094.458009][ T5107] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1094.469639][ T5107] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1094.487614][ T5107] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1094.495077][ T5107] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1094.606379][T17059] loop2: detected capacity change from 0 to 32768 [ 1094.683390][T17059] [ 1094.683390][T17059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1094.683390][T17059] [ 1094.810420][T17084] loop4: detected capacity change from 0 to 8192 [ 1094.832609][ T12] [ 1094.832609][ T12] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1094.832609][ T12] [ 1094.883112][ T12] [ 1094.883112][ T12] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1094.883112][ T12] [ 1094.887287][T13453] bridge_slave_0: left allmulticast mode [ 1094.933007][ T112] [ 1094.933007][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1094.933007][ T112] [ 1094.945993][T13453] bridge_slave_0: left promiscuous mode [ 1094.976400][T13453] bridge0: port 1(bridge_slave_0) entered disabled state [ 1094.977264][T15147] [ 1094.977264][T15147] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1094.977264][T15147] [ 1095.050219][T15147] [ 1095.050219][T15147] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1095.050219][T15147] [ 1095.223265][T17095] loop1: detected capacity change from 0 to 8 [ 1095.354838][T17095] unable to read xattr id index table [ 1095.661938][T17103] loop2: detected capacity change from 0 to 2048 [ 1095.780111][T17103] GPT:first_usable_lbas don't match. [ 1095.785732][T17103] GPT:34 != 290 [ 1095.789889][T17103] GPT: Use GNU Parted to correct GPT errors. [ 1095.829386][T17103] loop2: p1 p2 p3 [ 1096.196047][T17108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3884'. [ 1096.547418][ T5110] Bluetooth: hci6: command tx timeout [ 1097.132292][T17124] loop2: detected capacity change from 0 to 512 [ 1097.174157][T17124] EXT4-fs (loop2): filesystem is read-only [ 1097.184241][T13453] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1097.198882][T13453] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1097.229497][T13453] bond0 (unregistering): Released all slaves [ 1097.332821][T17101] netlink: 'syz.4.3883': attribute type 2 has an invalid length. [ 1097.441365][T17125] ptrace attach of "./syz-executor exec"[15147] was attempted by "./syz-executor exec"[17125] [ 1097.624649][T17129] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1099.000109][ T5110] Bluetooth: hci6: command tx timeout [ 1099.376750][T13453] hsr_slave_0: left promiscuous mode [ 1099.471788][T13453] hsr_slave_1: left promiscuous mode [ 1099.498508][T13453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1099.505989][T13453] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1099.608767][T17119] loop3: detected capacity change from 0 to 32768 [ 1099.627226][T13453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1099.635820][T13453] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1099.750892][T17148] input: syz1 as /devices/virtual/input/input38 [ 1099.760957][T17119] [ 1099.760957][T17119] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1099.760957][T17119] [ 1099.798912][T17119] read_mapping_page failed! [ 1099.837284][T17119] diRead: read_metapage failed [ 1099.871537][T17152] loop2: detected capacity change from 0 to 1024 [ 1099.890671][T13453] veth1_macvtap: left promiscuous mode [ 1099.896366][T13453] veth0_macvtap: left promiscuous mode [ 1099.915927][T13453] veth1_vlan: left promiscuous mode [ 1099.925897][T13453] veth0_vlan: left promiscuous mode [ 1099.937657][T17152] EXT4-fs: Ignoring removed nobh option [ 1099.998482][T17152] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1101.035946][ T5110] Bluetooth: hci6: command tx timeout [ 1101.251749][T17169] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1101.360571][T15147] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1101.607262][T17176] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3906'. [ 1101.854518][T17175] loop3: detected capacity change from 0 to 8192 [ 1101.932535][T17184] loop4: detected capacity change from 0 to 1764 [ 1102.000517][T17184] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1102.539201][T17193] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1103.119241][ T5110] Bluetooth: hci6: command tx timeout [ 1103.733022][T13453] team0 (unregistering): Port device team_slave_1 removed [ 1103.912541][T17211] loop4: detected capacity change from 0 to 256 [ 1103.975046][T13453] team0 (unregistering): Port device team_slave_0 removed [ 1103.989355][T17209] loop3: detected capacity change from 0 to 256 [ 1104.067359][T17211] FAT-fs (loop4): Directory bread(block 64) failed [ 1104.073982][T17211] FAT-fs (loop4): Directory bread(block 65) failed [ 1104.102836][T17211] FAT-fs (loop4): Directory bread(block 66) failed [ 1104.146338][T17211] FAT-fs (loop4): Directory bread(block 67) failed [ 1104.161689][T17211] FAT-fs (loop4): Directory bread(block 68) failed [ 1104.177110][T17211] FAT-fs (loop4): Directory bread(block 69) failed [ 1104.183914][T17211] FAT-fs (loop4): Directory bread(block 70) failed [ 1104.207168][T17211] FAT-fs (loop4): Directory bread(block 71) failed [ 1104.213974][T17211] FAT-fs (loop4): Directory bread(block 72) failed [ 1104.237114][T17211] FAT-fs (loop4): Directory bread(block 73) failed [ 1105.187339][ C0] DEBUG: holding rtnl_mutex for 588 jiffies. [ 1105.193405][ C0] task:kworker/u8:10 state:R running task stack:18672 pid:13453 tgid:13453 ppid:2 flags:0x00004000 [ 1105.205268][ C0] Workqueue: netns cleanup_net [ 1105.210158][ C0] Call Trace: [ 1105.213572][ C0] [ 1105.216552][ C0] __schedule+0x1800/0x4a60 [ 1105.221186][ C0] ? __pfx___schedule+0x10/0x10 [ 1105.226088][ C0] ? __pfx_lock_release+0x10/0x10 [ 1105.231215][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1105.237214][ C0] ? kthread_data+0x52/0xd0 [ 1105.241776][ C0] ? wq_worker_sleeping+0x66/0x240 [ 1105.246947][ C0] ? schedule+0x90/0x320 [ 1105.251293][ C0] schedule+0x14b/0x320 [ 1105.255499][ C0] synchronize_rcu_expedited+0x684/0x830 [ 1105.261252][ C0] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 1105.267523][ C0] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 1105.272871][ C0] ? __pfx___might_resched+0x10/0x10 [ 1105.278250][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1105.284378][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1105.289694][ C0] synchronize_rcu+0x11b/0x360 [ 1105.294527][ C0] ? __pfx_synchronize_rcu+0x10/0x10 [ 1105.299931][ C0] lockdep_unregister_key+0x556/0x610 [ 1105.305452][ C0] ? __pfx_lockdep_unregister_key+0x10/0x10 [ 1105.311449][ C0] ? rcu_is_watching+0x15/0xb0 [ 1105.316276][ C0] ? qdisc_reset+0x3bf/0x5b0 [ 1105.320966][ C0] __qdisc_destroy+0x165/0x410 [ 1105.325782][ C0] dev_shutdown+0x357/0x440 [ 1105.330379][ C0] unregister_netdevice_many_notify+0x9c7/0x1d20 [ 1105.336794][ C0] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1105.343688][ C0] ? unregister_netdevice_queue+0x26b/0x370 [ 1105.349706][ C0] ? batadv_softif_destroy_netlink+0x1e0/0x270 [ 1105.355930][ C0] default_device_exit_batch+0xa0f/0xa90 [ 1105.361690][ C0] ? __pfx___might_resched+0x10/0x10 [ 1105.367079][ C0] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1105.373304][ C0] ? cfg802154_pernet_exit+0xc3/0xe0 [ 1105.378687][ C0] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1105.384909][ C0] cleanup_net+0x89d/0xcc0 [ 1105.389436][ C0] ? __pfx_cleanup_net+0x10/0x10 [ 1105.394422][ C0] ? preempt_schedule_thunk+0x1a/0x30 [ 1105.399897][ C0] ? process_scheduled_works+0x945/0x1830 [ 1105.405679][ C0] process_scheduled_works+0xa2c/0x1830 [ 1105.411367][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1105.417454][ C0] ? assign_work+0x364/0x3d0 [ 1105.422104][ C0] worker_thread+0x86d/0xd40 [ 1105.426757][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1105.432761][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1105.437880][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1105.443038][ C0] kthread+0x2f0/0x390 [ 1105.447199][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1105.452356][ C0] ? __pfx_kthread+0x10/0x10 [ 1105.457048][ C0] ret_from_fork+0x4b/0x80 [ 1105.461520][ C0] ? __pfx_kthread+0x10/0x10 [ 1105.466164][ C0] ret_from_fork_asm+0x1a/0x30 [ 1105.471060][ C0] [ 1105.474120][ C0] DEBUG: waiting rtnl_mutex for 616 jiffies. [ 1105.480180][ C0] task:syz-executor state:D stack:24512 pid:17082 tgid:17082 ppid:17060 flags:0x00000000 [ 1105.490542][ C0] Call Trace: [ 1105.493859][ C0] [ 1105.496829][ C0] __schedule+0x1800/0x4a60 [ 1105.501458][ C0] ? __pfx___schedule+0x10/0x10 [ 1105.506363][ C0] ? __pfx_lock_release+0x10/0x10 [ 1105.511571][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 1105.517127][ C0] ? schedule+0x90/0x320 [ 1105.521418][ C0] schedule+0x14b/0x320 [ 1105.525620][ C0] schedule_preempt_disabled+0x13/0x30 [ 1105.531181][ C0] __mutex_lock+0x6a4/0xd70 [ 1105.535755][ C0] ? __mutex_lock+0x527/0xd70 [ 1105.540533][ C0] ? rtnetlink_rcv_msg+0x847/0x1180 [ 1105.545795][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1105.550941][ C0] ? get_rtnl_holder+0x144/0x190 [ 1105.555927][ C0] rtnetlink_rcv_msg+0x847/0x1180 [ 1105.561061][ C0] ? rtnetlink_rcv_msg+0x208/0x1180 [ 1105.566321][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1105.571889][ C0] ? is_bpf_text_address+0x285/0x2a0 [ 1105.577279][ C0] ? __pfx_validate_chain+0x10/0x10 [ 1105.582526][ C0] ? __pfx_validate_chain+0x10/0x10 [ 1105.587822][ C0] ? arch_stack_walk+0x16d/0x1b0 [ 1105.592813][ C0] ? mark_lock+0x9a/0x360 [ 1105.597232][ C0] ? __pfx_validate_chain+0x10/0x10 [ 1105.602494][ C0] ? __lock_acquire+0x1359/0x2000 [ 1105.607628][ C0] ? mark_lock+0x9a/0x360 [ 1105.612011][ C0] ? __lock_acquire+0x1359/0x2000 [ 1105.617139][ C0] netlink_rcv_skb+0x1e3/0x430 [ 1105.621967][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1105.627522][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1105.632891][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 1105.638196][ C0] netlink_unicast+0x7f0/0x990 [ 1105.643025][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 1105.648413][ C0] ? __virt_addr_valid+0x183/0x530 [ 1105.653595][ C0] ? __check_object_size+0x49c/0x900 [ 1105.658976][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 1105.664140][ C0] netlink_sendmsg+0x8e4/0xcb0 [ 1105.669012][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1105.674345][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1105.680432][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 1105.685427][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1105.690814][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 1105.696324][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1105.701689][ C0] __sock_sendmsg+0x221/0x270 [ 1105.706427][ C0] __sys_sendto+0x3a4/0x4f0 [ 1105.711028][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 1105.716129][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1105.722206][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1105.728636][ C0] __x64_sys_sendto+0xde/0x100 [ 1105.733458][ C0] do_syscall_64+0xf3/0x230 [ 1105.738074][ C0] ? clear_bhb_loop+0x35/0x90 [ 1105.742838][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1105.748841][ C0] RIP: 0033:0x7f1e9437796c [ 1105.753297][ C0] RSP: 002b:00007ffd06f00ca0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1105.761821][ C0] RAX: ffffffffffffffda RBX: 00007f1e95034620 RCX: 00007f1e9437796c [ 1105.769891][ C0] RDX: 0000000000000028 RSI: 00007f1e95034670 RDI: 0000000000000003 [ 1105.777957][ C0] RBP: 0000000000000000 R08: 00007ffd06f00cf4 R09: 000000000000000c [ 1105.785977][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1105.794041][ C0] R13: 0000000000000000 R14: 00007f1e95034670 R15: 0000000000000000 [ 1105.802123][ C0] [ 1105.805178][ C0] DEBUG: waiting rtnl_mutex for 615 jiffies. [ 1105.811234][ C0] task:kworker/1:6 state:D stack:21000 pid:5155 tgid:5155 ppid:2 flags:0x00004000 [ 1105.821508][ C0] Workqueue: events linkwatch_event [ 1105.826760][ C0] Call Trace: [ 1105.830121][ C0] [ 1105.833099][ C0] __schedule+0x1800/0x4a60 [ 1105.837711][ C0] ? __pfx___schedule+0x10/0x10 [ 1105.842608][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1105.848694][ C0] ? __pfx_lock_release+0x10/0x10 [ 1105.853782][ C0] ? kick_pool+0x45c/0x620 [ 1105.858301][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1105.863549][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1105.868849][ C0] ? schedule+0x90/0x320 [ 1105.873137][ C0] schedule+0x14b/0x320 [ 1105.877403][ C0] schedule_preempt_disabled+0x13/0x30 [ 1105.882913][ C0] __mutex_lock+0x6a4/0xd70 [ 1105.887523][ C0] ? __mutex_lock+0x527/0xd70 [ 1105.892254][ C0] ? linkwatch_event+0xe/0x60 [ 1105.896980][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1105.902109][ C0] ? get_rtnl_holder+0x144/0x190 [ 1105.907134][ C0] ? process_scheduled_works+0x945/0x1830 [ 1105.912893][ C0] linkwatch_event+0xe/0x60 [ 1105.917479][ C0] process_scheduled_works+0xa2c/0x1830 [ 1105.923195][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1105.929280][ C0] ? assign_work+0x364/0x3d0 [ 1105.933922][ C0] worker_thread+0x86d/0xd40 [ 1105.938630][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1105.944588][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1105.949722][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1105.954887][ C0] kthread+0x2f0/0x390 [ 1105.959045][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1105.964202][ C0] ? __pfx_kthread+0x10/0x10 [ 1105.968895][ C0] ret_from_fork+0x4b/0x80 [ 1105.973361][ C0] ? __pfx_kthread+0x10/0x10 [ 1105.978049][ C0] ret_from_fork_asm+0x1a/0x30 [ 1105.982921][ C0] [ 1105.985973][ C0] DEBUG: waiting rtnl_mutex for 618 jiffies. [ 1105.992035][ C0] task:syz.1.3900 state:D stack:26800 pid:17150 tgid:17149 ppid:15178 flags:0x00000004 [ 1106.002318][ C0] Call Trace: [ 1106.005635][ C0] [ 1106.008647][ C0] __schedule+0x1800/0x4a60 [ 1106.013226][ C0] ? __pfx___schedule+0x10/0x10 [ 1106.018193][ C0] ? __pfx_lock_release+0x10/0x10 [ 1106.023282][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 1106.028875][ C0] ? schedule+0x90/0x320 [ 1106.033168][ C0] schedule+0x14b/0x320 [ 1106.037419][ C0] schedule_preempt_disabled+0x13/0x30 [ 1106.042933][ C0] __mutex_lock+0x6a4/0xd70 [ 1106.047536][ C0] ? __mutex_lock+0x527/0xd70 [ 1106.052260][ C0] ? rtnetlink_rcv_msg+0x847/0x1180 [ 1106.057555][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1106.062657][ C0] ? get_rtnl_holder+0x144/0x190 [ 1106.067818][ C0] rtnetlink_rcv_msg+0x847/0x1180 [ 1106.072911][ C0] ? rtnetlink_rcv_msg+0x208/0x1180 [ 1106.078217][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1106.083743][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 1106.089260][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1106.094515][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 1106.099982][ C0] ? dev_hard_start_xmit+0x773/0x7e0 [ 1106.105318][ C0] ? __dev_queue_xmit+0x2da/0x3e90 [ 1106.110532][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1106.116310][ C0] ? __dev_queue_xmit+0x2da/0x3e90 [ 1106.121520][ C0] ? __dev_queue_xmit+0x1763/0x3e90 [ 1106.126766][ C0] ? kasan_save_track+0x51/0x80 [ 1106.131744][ C0] ? do_syscall_64+0xf3/0x230 [ 1106.136469][ C0] ? __dev_queue_xmit+0x2da/0x3e90 [ 1106.141686][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1106.147159][ C0] ? ref_tracker_free+0x643/0x7e0 [ 1106.152234][ C0] netlink_rcv_skb+0x1e3/0x430 [ 1106.157110][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1106.162632][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1106.168049][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 1106.173292][ C0] netlink_unicast+0x7f0/0x990 [ 1106.178159][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 1106.183502][ C0] ? __virt_addr_valid+0x183/0x530 [ 1106.188745][ C0] ? __check_object_size+0x49c/0x900 [ 1106.194094][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 1106.199324][ C0] netlink_sendmsg+0x8e4/0xcb0 [ 1106.204156][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1106.209540][ C0] ? __import_iovec+0x536/0x820 [ 1106.214437][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 1106.219482][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1106.224813][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 1106.230381][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1106.235710][ C0] __sock_sendmsg+0x221/0x270 [ 1106.240504][ C0] ____sys_sendmsg+0x525/0x7d0 [ 1106.245326][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1106.250731][ C0] __sys_sendmsg+0x2b0/0x3a0 [ 1106.255371][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 1106.260638][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1106.267055][ C0] ? do_syscall_64+0x100/0x230 [ 1106.271880][ C0] ? do_syscall_64+0xb6/0x230 [ 1106.276599][ C0] do_syscall_64+0xf3/0x230 [ 1106.281184][ C0] ? clear_bhb_loop+0x35/0x90 [ 1106.285919][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1106.291919][ C0] RIP: 0033:0x7f6e96975bd9 [ 1106.296382][ C0] RSP: 002b:00007f6e97695048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1106.304908][ C0] RAX: ffffffffffffffda RBX: 00007f6e96b03f60 RCX: 00007f6e96975bd9 [ 1106.312974][ C0] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 1106.321038][ C0] RBP: 00007f6e969e4e60 R08: 0000000000000000 R09: 0000000000000000 [ 1106.329100][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1106.337163][ C0] R13: 000000000000000b R14: 00007f6e96b03f60 R15: 00007ffc943e3d68 [ 1106.345291][ C0] [ 1106.348393][ C0] [ 1106.348393][ C0] Showing all locks held in the system: [ 1106.356145][ C0] 3 locks held by kworker/u8:0/11: [ 1106.361349][ C0] #0: ffff888029b3f948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1106.373079][ C0] #1: ffffc90000107d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1106.386878][ C0] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 1106.396500][ C0] 3 locks held by kworker/u8:1/12: [ 1106.401747][ C0] 2 locks held by getty/4852: [ 1106.406473][ C0] #0: ffff88802a83a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1106.416371][ C0] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 1106.426625][ C0] 3 locks held by kworker/1:6/5155: [ 1106.431895][ C0] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1106.443001][ C0] #1: ffffc900041bfd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1106.454105][ C0] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 1106.463220][ C0] 5 locks held by kworker/u8:10/13453: [ 1106.468750][ C0] #0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1106.479766][ C0] #1: ffffc9000a68fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1106.490462][ C0] #2: ffffffff8f5f2c10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 1106.500003][ C0] #3: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 [ 1106.510156][ C0] #4: ffffffff8e33ac38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 1106.521192][ C0] 1 lock held by syz-executor/17082: [ 1106.526550][ C0] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 1106.536190][ C0] 1 lock held by syz.1.3900/17150: [ 1106.541374][ C0] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 1106.551018][ C0] 1 lock held by syz.2.3913/17186: [ 1106.556164][ C0] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: dev_ethtool+0x21e/0x1bc0 [ 1106.565320][ C0] 1 lock held by syz.3.3927/17219: [ 1106.570514][ C0] #0: ffff88802ca26068 (&pipe->mutex){+.+.}-{3:3}, at: pipe_write+0xd60/0x1a40 [ 1106.579717][ C0] 2 locks held by syz.3.3927/17220: [ 1106.584951][ C0] #0: ffff88802ca26068 (&pipe->mutex){+.+.}-{3:3}, at: splice_to_socket+0xee/0x10b0 [ 1106.594592][ C0] #1: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 1106.604258][ C0] 1 lock held by syz.4.3928/17221: [ 1106.609467][ C0] #0: ffff8880596a2798 (&mm->mmap_lock){++++}-{3:3}, at: vm_mmap_pgoff+0x17c/0x3d0 [ 1106.619016][ C0] 5 locks held by syz.4.3928/17222: [ 1106.624249][ C0] #0: ffff8880596a2798 (&mm->mmap_lock){++++}-{3:3}, at: __mm_populate+0x1b0/0x460 [ 1106.633792][ C0] #1: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: __pte_offset_map+0x82/0x380 [ 1106.643447][ C0] #2: ffff88802cd6fdf8 (ptlock_ptr(ptdesc)#2){+.+.}-{2:2}, at: __pte_offset_map_lock+0x1ba/0x300 [ 1106.654235][ C0] #3: ffffc90000007c00 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 1106.664488][ C0] #4: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1106.674485][ C0] [ 1106.676842][ C0] ============================================= [ 1106.676842][ C0] [ 1107.577493][T17150] netlink: 'syz.1.3900': attribute type 2 has an invalid length. [ 1107.620403][T17220] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3927'. [ 1107.705217][T17228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3930'. [ 1108.163561][T17082] chnl_net:caif_netlink_parms(): no params data found [ 1108.347109][ T46] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1108.527170][ T46] usb 5-1: device descriptor read/64, error -71 [ 1108.797135][ T46] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1108.834743][T17082] bridge0: port 1(bridge_slave_0) entered blocking state [ 1108.876664][T17082] bridge0: port 1(bridge_slave_0) entered disabled state [ 1108.907372][T17082] bridge_slave_0: entered allmulticast mode [ 1108.925735][T17082] bridge_slave_0: entered promiscuous mode [ 1108.952777][T17082] bridge0: port 2(bridge_slave_1) entered blocking state [ 1108.967152][ T46] usb 5-1: device descriptor read/64, error -71 [ 1108.971911][T17082] bridge0: port 2(bridge_slave_1) entered disabled state [ 1108.990139][T17082] bridge_slave_1: entered allmulticast mode [ 1109.000850][T17082] bridge_slave_1: entered promiscuous mode [ 1109.087176][T17266] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3943'. [ 1109.099922][ T46] usb usb5-port1: attempt power cycle [ 1109.138123][T17082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1109.163856][T17082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1109.288621][T17082] team0: Port device team_slave_0 added [ 1109.311206][T17082] team0: Port device team_slave_1 added [ 1109.398356][T17082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1109.411930][T17082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1109.452608][T17082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1109.468771][T17082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1109.475781][T17082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1109.517162][T17082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1109.537338][ T46] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1109.578322][ T46] usb 5-1: device descriptor read/8, error -71 [ 1109.624764][T17082] hsr_slave_0: entered promiscuous mode [ 1109.633608][T17082] hsr_slave_1: entered promiscuous mode [ 1109.641153][T17082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1109.660684][T17082] Cannot create hsr debugfs directory [ 1109.858064][ T46] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1109.909106][ T46] usb 5-1: device descriptor read/8, error -71 [ 1110.049536][ T46] usb usb5-port1: unable to enumerate USB device [ 1110.904117][T17082] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1110.964803][T17082] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1111.006539][T17082] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1111.059687][T17082] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1112.069180][T17082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1112.197221][ T5190] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1112.251218][T17082] 8021q: adding VLAN 0 to HW filter on device team0 [ 1112.262389][T17324] loop2: detected capacity change from 0 to 64 [ 1112.290986][ T5152] bridge0: port 1(bridge_slave_0) entered blocking state [ 1112.298292][ T5152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1112.358716][ T5152] bridge0: port 2(bridge_slave_1) entered blocking state [ 1112.365943][ T5152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1112.417160][ T5190] usb 5-1: Using ep0 maxpacket: 8 [ 1112.424543][ T5190] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1112.455508][ T5190] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1112.487656][ T5190] usb 5-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 1112.496793][ T5190] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.543468][T17332] loop3: detected capacity change from 0 to 1024 [ 1112.554098][ T5190] usb 5-1: config 0 descriptor?? [ 1112.580647][ T5190] hso 5-1:0.0: Can't find BULK IN endpoint [ 1112.603235][T17332] EXT4-fs: Ignoring removed nobh option [ 1112.649359][T17332] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1112.810045][ T58] usb 5-1: USB disconnect, device number 38 [ 1113.009272][T17347] input: syz1 as /devices/virtual/input/input39 [ 1113.146756][T17351] loop2: detected capacity change from 0 to 64 [ 1113.576863][T17082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1113.827948][T17082] veth0_vlan: entered promiscuous mode [ 1113.954673][T17082] veth1_vlan: entered promiscuous mode [ 1114.031984][T15156] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1114.143327][T17082] veth0_macvtap: entered promiscuous mode [ 1114.164579][T17364] input: syz1 as /devices/virtual/input/input40 [ 1114.201908][T17082] veth1_macvtap: entered promiscuous mode [ 1114.307381][T17082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1114.346004][T17082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.387229][T17082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1114.407631][T17082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.427880][T17082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1114.454873][T17082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.477116][T17082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1114.493495][T17082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.500901][ T46] IPVS: starting estimator thread 0... [ 1114.509890][T17082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1114.525622][T17373] syz.1.3983[17373] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1114.525797][T17373] syz.1.3983[17373] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1114.537816][T17082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.570722][T17373] loop1: detected capacity change from 0 to 164 [ 1114.577385][T17082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1114.595946][T17082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.607667][T17376] IPVS: using max 15 ests per chain, 36000 per kthread [ 1114.620923][T17082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1114.624329][ T5105] ================================================================== [ 1114.636269][ T5105] BUG: KASAN: slab-use-after-free in nf_tables_trans_destroy_work+0x152b/0x1750 [ 1114.645348][ T5105] Read of size 2 at addr ffff888062a70dc4 by task kworker/1:3/5105 [ 1114.653277][ T5105] [ 1114.655641][ T5105] CPU: 1 UID: 0 PID: 5105 Comm: kworker/1:3 Not tainted 6.10.0-rc6-next-20240703-syzkaller #0 [ 1114.664345][T17082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1114.665892][ T5105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1114.686388][ T5105] Workqueue: events nf_tables_trans_destroy_work [ 1114.692768][ T5105] Call Trace: [ 1114.694628][T17082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.696058][ T5105] [ 1114.708811][ T5105] dump_stack_lvl+0x241/0x360 [ 1114.713531][ T5105] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1114.717207][T17082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1114.718758][ T5105] ? __pfx__printk+0x10/0x10 [ 1114.733776][ T5105] ? _printk+0xd5/0x120 [ 1114.737969][ T5105] ? __virt_addr_valid+0x183/0x530 [ 1114.739574][T17082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.743098][ T5105] ? __virt_addr_valid+0x183/0x530 [ 1114.743136][ T5105] print_report+0x169/0x550 [ 1114.762232][T17082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1114.762524][ T5105] ? __virt_addr_valid+0x183/0x530 [ 1114.775643][T17082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.778011][ T5105] ? __virt_addr_valid+0x183/0x530 [ 1114.778048][ T5105] ? __virt_addr_valid+0x45f/0x530 [ 1114.778081][ T5105] ? __phys_addr+0xba/0x170 [ 1114.778116][ T5105] ? nf_tables_trans_destroy_work+0x152b/0x1750 [ 1114.778151][ T5105] kasan_report+0x143/0x180 [ 1114.778182][ T5105] ? nf_tables_trans_destroy_work+0x152b/0x1750 [ 1114.778220][ T5105] nf_tables_trans_destroy_work+0x152b/0x1750 [ 1114.778262][ T5105] ? __pfx_nf_tables_trans_destroy_work+0x10/0x10 [ 1114.778295][ T5105] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1114.824169][T17082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1114.825840][ T5105] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1114.841168][T17082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.848657][ T5105] ? process_scheduled_works+0x945/0x1830 [ 1114.848693][ T5105] process_scheduled_works+0xa2c/0x1830 [ 1114.848744][ T5105] ? __pfx_process_scheduled_works+0x10/0x10 [ 1114.848778][ T5105] ? assign_work+0x364/0x3d0 [ 1114.848808][ T5105] worker_thread+0x86d/0xd40 [ 1114.848843][ T5105] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1114.848873][ T5105] ? __kthread_parkme+0x169/0x1d0 [ 1114.863831][T17082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1114.864986][ T5105] ? __pfx_worker_thread+0x10/0x10 [ 1114.873763][T17082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.876254][ T5105] kthread+0x2f0/0x390 [ 1114.893067][T17082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1114.897309][ T5105] ? __pfx_worker_thread+0x10/0x10 [ 1114.897353][ T5105] ? __pfx_kthread+0x10/0x10 [ 1114.897385][ T5105] ret_from_fork+0x4b/0x80 [ 1114.897416][ T5105] ? __pfx_kthread+0x10/0x10 [ 1114.897446][ T5105] ret_from_fork_asm+0x1a/0x30 [ 1114.897488][ T5105] [ 1114.897498][ T5105] [ 1114.897504][ T5105] Allocated by task 17368: [ 1114.897516][ T5105] kasan_save_track+0x3f/0x80 [ 1114.897540][ T5105] __kasan_kmalloc+0x98/0xb0 [ 1114.897562][ T5105] __kmalloc_cache_noprof+0x19c/0x2c0 [ 1114.897594][ T5105] nf_tables_newtable+0x52e/0x1dc0 [ 1114.905496][T17082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.913024][ T5105] nfnetlink_rcv+0x1427/0x2a90 [ 1114.913053][ T5105] netlink_unicast+0x7f0/0x990 [ 1114.913081][ T5105] netlink_sendmsg+0x8e4/0xcb0 [ 1114.913114][ T5105] __sock_sendmsg+0x221/0x270 [ 1114.913162][ T5105] ____sys_sendmsg+0x525/0x7d0 [ 1114.913204][ T5105] __sys_sendmsg+0x2b0/0x3a0 [ 1114.913246][ T5105] do_syscall_64+0xf3/0x230 [ 1114.913277][ T5105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.913302][ T5105] [ 1114.913309][ T5105] Freed by task 17367: [ 1114.913321][ T5105] kasan_save_track+0x3f/0x80 [ 1114.913343][ T5105] kasan_save_free_info+0x40/0x50 [ 1114.934405][T17082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1114.942749][ T5105] poison_slab_object+0xe0/0x150 [ 1114.942785][ T5105] __kasan_slab_free+0x37/0x60 [ 1114.942807][ T5105] kfree+0x149/0x360 [ 1114.942834][ T5105] __nft_release_table+0xe80/0xf40 [ 1114.942862][ T5105] nft_rcv_nl_event+0x55f/0x6d0 [ 1114.942889][ T5105] notifier_call_chain+0x19f/0x3e0 [ 1114.942916][ T5105] blocking_notifier_call_chain+0x69/0x90 [ 1114.942944][ T5105] netlink_release+0x11a6/0x1b10 [ 1114.942965][ T5105] sock_close+0xbc/0x240 [ 1114.942993][ T5105] __fput+0x24a/0x8a0 [ 1114.943025][ T5105] task_work_run+0x24f/0x310 [ 1114.943044][ T5105] syscall_exit_to_user_mode+0x168/0x370 [ 1114.943075][ T5105] do_syscall_64+0x100/0x230 [ 1114.943093][ T5105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.984077][T17082] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.985564][ T5105] [ 1114.985573][ T5105] Last potentially related work creation: [ 1114.985583][ T5105] kasan_save_stack+0x3f/0x60 [ 1115.004719][T17082] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.005866][ T5105] __kasan_record_aux_stack+0xac/0xc0 [ 1115.012175][T17082] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.015398][ T5105] insert_work+0x3e/0x330 [ 1115.015426][ T5105] __queue_work+0xc16/0xee0 [ 1115.032470][T17082] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.034275][ T5105] queue_work_on+0x1c2/0x380 [ 1115.034310][ T5105] rhltable_remove+0x1097/0x1160 [ 1115.207628][ T5105] __nft_release_table+0xc57/0xf40 [ 1115.212787][ T5105] nft_rcv_nl_event+0x55f/0x6d0 [ 1115.217670][ T5105] notifier_call_chain+0x19f/0x3e0 [ 1115.222814][ T5105] blocking_notifier_call_chain+0x69/0x90 [ 1115.228561][ T5105] netlink_release+0x11a6/0x1b10 [ 1115.233529][ T5105] sock_close+0xbc/0x240 [ 1115.237803][ T5105] __fput+0x24a/0x8a0 [ 1115.241821][ T5105] task_work_run+0x24f/0x310 [ 1115.246426][ T5105] syscall_exit_to_user_mode+0x168/0x370 [ 1115.252102][ T5105] do_syscall_64+0x100/0x230 [ 1115.256716][ T5105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1115.262636][ T5105] [ 1115.264971][ T5105] The buggy address belongs to the object at ffff888062a70c00 [ 1115.264971][ T5105] which belongs to the cache kmalloc-cg-512 of size 512 [ 1115.279304][ T5105] The buggy address is located 452 bytes inside of [ 1115.279304][ T5105] freed 512-byte region [ffff888062a70c00, ffff888062a70e00) [ 1115.293126][ T5105] [ 1115.295463][ T5105] The buggy address belongs to the physical page: [ 1115.301908][ T5105] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x62a70 [ 1115.310705][ T5105] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1115.319233][ T5105] memcg:ffff88802b47be01 [ 1115.323518][ T5105] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1115.331070][ T5105] page_type: 0xfdffffff(slab) [ 1115.335757][ T5105] raw: 00fff00000000040 ffff88801504f140 ffffea0000b06b00 dead000000000002 [ 1115.344353][ T5105] raw: 0000000000000000 0000000080100010 00000001fdffffff ffff88802b47be01 [ 1115.352948][ T5105] head: 00fff00000000040 ffff88801504f140 ffffea0000b06b00 dead000000000002 [ 1115.361637][ T5105] head: 0000000000000000 0000000080100010 00000001fdffffff ffff88802b47be01 [ 1115.370344][ T5105] head: 00fff00000000002 ffffea00018a9c01 ffffffffffffffff 0000000000000000 [ 1115.379043][ T5105] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 1115.387741][ T5105] page dumped because: kasan: bad access detected [ 1115.394174][ T5105] page_owner tracks the page as allocated [ 1115.399902][ T5105] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5099, tgid 5099 (syz-executor), ts 77095765654, free_ts 24045803360 [ 1115.423031][ T5105] post_alloc_hook+0x1f3/0x230 [ 1115.427817][ T5105] get_page_from_freelist+0x2ccb/0x2d80 [ 1115.433393][ T5105] __alloc_pages_noprof+0x256/0x6c0 [ 1115.438614][ T5105] alloc_slab_page+0x5f/0x120 [ 1115.443312][ T5105] allocate_slab+0x5a/0x2f0 [ 1115.447829][ T5105] ___slab_alloc+0xcd1/0x14b0 [ 1115.452522][ T5105] __slab_alloc+0x58/0xa0 [ 1115.456851][ T5105] __kmalloc_node_noprof+0x286/0x440 [ 1115.462150][ T5105] __kvmalloc_node_noprof+0x72/0x190 [ 1115.467457][ T5105] alloc_netdev_mqs+0xa1f/0xff0 [ 1115.472345][ T5105] rtnl_create_link+0x2f9/0xc20 [ 1115.477232][ T5105] rtnl_newlink+0x140d/0x2070 [ 1115.481945][ T5105] rtnetlink_rcv_msg+0x8a0/0x1180 [ 1115.487043][ T5105] netlink_rcv_skb+0x1e3/0x430 [ 1115.491874][ T5105] netlink_unicast+0x7f0/0x990 [ 1115.496685][ T5105] netlink_sendmsg+0x8e4/0xcb0 [ 1115.501464][ T5105] page last free pid 1 tgid 1 stack trace: [ 1115.507289][ T5105] free_unref_page+0xd22/0xea0 [ 1115.512079][ T5105] free_contig_range+0x9e/0x160 [ 1115.516930][ T5105] destroy_args+0x8a/0x890 [ 1115.521462][ T5105] debug_vm_pgtable+0x4be/0x550 [ 1115.526383][ T5105] do_one_initcall+0x248/0x880 [ 1115.531179][ T5105] do_initcall_level+0x157/0x210 [ 1115.536173][ T5105] do_initcalls+0x3f/0x80 [ 1115.540523][ T5105] kernel_init_freeable+0x435/0x5d0 [ 1115.545754][ T5105] kernel_init+0x1d/0x2b0 [ 1115.550103][ T5105] ret_from_fork+0x4b/0x80 [ 1115.554578][ T5105] ret_from_fork_asm+0x1a/0x30 [ 1115.559362][ T5105] [ 1115.561700][ T5105] Memory state around the buggy address: [ 1115.567355][ T5105] ffff888062a70c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1115.575448][ T5105] ffff888062a70d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1115.583550][ T5105] >ffff888062a70d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1115.591640][ T5105] ^ [ 1115.597819][ T5105] ffff888062a70e00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1115.605913][ T5105] ffff888062a70e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1115.613981][ T5105] ================================================================== [ 1115.923982][ T5492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1115.950156][ T5492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1116.005415][T13453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1116.032191][T13453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1116.298126][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.304489][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.667162][ T5105] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1116.674411][ T5105] CPU: 1 UID: 0 PID: 5105 Comm: kworker/1:3 Not tainted 6.10.0-rc6-next-20240703-syzkaller #0 [ 1116.684671][ T5105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1116.694742][ T5105] Workqueue: events nf_tables_trans_destroy_work [ 1116.701101][ T5105] Call Trace: [ 1116.704392][ T5105] [ 1116.707334][ T5105] dump_stack_lvl+0x241/0x360 [ 1116.712047][ T5105] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1116.717260][ T5105] ? __pfx__printk+0x10/0x10 [ 1116.721863][ T5105] ? preempt_schedule+0xe1/0xf0 [ 1116.726732][ T5105] ? vscnprintf+0x5d/0x90 [ 1116.731072][ T5105] panic+0x349/0x870 [ 1116.734982][ T5105] ? check_panic_on_warn+0x21/0xb0 [ 1116.740113][ T5105] ? __pfx_panic+0x10/0x10 [ 1116.744547][ T5105] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 1116.750571][ T5105] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1116.756909][ T5105] ? print_report+0x502/0x550 [ 1116.761608][ T5105] check_panic_on_warn+0x86/0xb0 [ 1116.766563][ T5105] ? nf_tables_trans_destroy_work+0x152b/0x1750 [ 1116.772819][ T5105] end_report+0x77/0x160 [ 1116.777079][ T5105] kasan_report+0x154/0x180 [ 1116.781596][ T5105] ? nf_tables_trans_destroy_work+0x152b/0x1750 [ 1116.787856][ T5105] nf_tables_trans_destroy_work+0x152b/0x1750 [ 1116.793957][ T5105] ? __pfx_nf_tables_trans_destroy_work+0x10/0x10 [ 1116.800384][ T5105] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1116.806374][ T5105] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1116.812717][ T5105] ? process_scheduled_works+0x945/0x1830 [ 1116.818447][ T5105] process_scheduled_works+0xa2c/0x1830 [ 1116.824015][ T5105] ? __pfx_process_scheduled_works+0x10/0x10 [ 1116.830029][ T5105] ? assign_work+0x364/0x3d0 [ 1116.834635][ T5105] worker_thread+0x86d/0xd40 [ 1116.839249][ T5105] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1116.845154][ T5105] ? __kthread_parkme+0x169/0x1d0 [ 1116.850192][ T5105] ? __pfx_worker_thread+0x10/0x10 [ 1116.855312][ T5105] kthread+0x2f0/0x390 [ 1116.859394][ T5105] ? __pfx_worker_thread+0x10/0x10 [ 1116.864516][ T5105] ? __pfx_kthread+0x10/0x10 [ 1116.869121][ T5105] ret_from_fork+0x4b/0x80 [ 1116.873552][ T5105] ? __pfx_kthread+0x10/0x10 [ 1116.878154][ T5105] ret_from_fork_asm+0x1a/0x30 [ 1116.882969][ T5105] [ 1116.886324][ T5105] Kernel Offset: disabled [ 1116.890657][ T5105] Rebooting in 86400 seconds..