last executing test programs: 9.606307151s ago: executing program 3 (id=448): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write(r1, &(0x7f00000003c0)="f8596e940000000000000000", 0xc) vmsplice(r4, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r0, r4, 0x8f5, 0x0) write$binfmt_script(r4, 0x0, 0xd9) write(r2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x404, &(0x7f0000000440)={[{@init_itable_val={'init_itable', 0x3d, 0x4}}, {@data_ordered}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@mb_optimize_scan}, {@grpjquota}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x48084, 0x0) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) fdatasync(r5) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) r8 = socket(0x1e, 0x4, 0x0) recvmsg$unix(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r8, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 8.470311743s ago: executing program 3 (id=450): openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143041, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, 0x0, 0x20000000) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x40881}, 0x800) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x40) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) write$proc_mixer(r1, &(0x7f0000000100)=ANY=[], 0xb0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x1a1100, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f00005b1000/0x1000)=nil, 0x1000, 0x2, 0x12, r3, 0x0) 6.59025595s ago: executing program 3 (id=457): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000000)={0x21, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @lang_id={0x0, 0x3, 0x814}}}, 0x0) 6.033135812s ago: executing program 2 (id=460): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003080)={0x28, r1, 0xe6e964277ae08d57, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x40080) 5.779048227s ago: executing program 2 (id=462): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_read_part_table(0x593, &(0x7f00000005c0)="$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") 4.668693998s ago: executing program 2 (id=465): openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143041, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, 0x0, 0x20000000) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x40881}, 0x800) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x40) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) write$proc_mixer(r1, &(0x7f0000000100)=ANY=[], 0xb0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x1a1100, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f00005b1000/0x1000)=nil, 0x1000, 0x2, 0x12, r3, 0x0) 3.944110603s ago: executing program 1 (id=467): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/65, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74, 0x8080000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) recvmmsg(0xffffffffffffffff, &(0x7f00000099c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)=""/97, 0x61}], 0x1}, 0x7f}], 0x1, 0x10002, 0x0) 3.763692776s ago: executing program 2 (id=469): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, 0xfffffffffffffffc) 3.734700477s ago: executing program 1 (id=470): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x10000, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x844020, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) setreuid(0xee01, 0xee00) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) 3.460415972s ago: executing program 3 (id=472): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="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"], 0x4c}}, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000000)=0x3) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x101}, 0x0) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) timer_settime(0x0, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000040)="aa1d484ea0004000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e", 0x2a}], 0x1) 3.273760946s ago: executing program 2 (id=473): syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040fac1b736420"], 0x7) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000500)={[{@nodioread_nolock}, {@minixdf}, {@data_err_ignore}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x797, &(0x7f0000002040)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143041, 0x0) syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000500)=ANY=[], 0xc, 0xac, &(0x7f0000000100)="$eJzs0jFqwzAUBuBnY7cdu3foDXwHn6BnMB3tzZNLJ9+nlyh07RFygwxZsygYyUP2QAh8H0hPP/8ikP7PP2+xRryvESmlJu2aSPPyNQ7TvLTjMEVEG3+RVWU+Bw+uLs/ZR/4DWz72uatKfzh9f+4rNx+/eT7d7+IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcEPV63Wuo+vK8WXbLgEAAP//2Bwh+A==") pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 3.07822729s ago: executing program 0 (id=475): openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r3 = fsopen(&(0x7f00000000c0)='nfsd\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 1.968527232s ago: executing program 0 (id=476): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.943320822s ago: executing program 1 (id=477): openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143041, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, 0x0, 0x20000000) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x40881}, 0x800) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x40) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) write$proc_mixer(r1, &(0x7f0000000100)=ANY=[], 0xb0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x1a1100, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f00005b1000/0x1000)=nil, 0x1000, 0x2, 0x12, r3, 0x0) 1.586352829s ago: executing program 0 (id=478): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/65, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74, 0x8080000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) recvmmsg(0xffffffffffffffff, &(0x7f00000099c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)=""/97, 0x61}], 0x1}, 0x7f}], 0x1, 0x10002, 0x0) 1.314515085s ago: executing program 1 (id=479): openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x891, &(0x7f0000000140)={0x0, 0x8c36, 0x80, 0x2, 0xbfdffdf8}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000440)={{0xffbe, 0x5, 0x2, 0x5}, 'syz1\x00', 0x53}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) 1.258335596s ago: executing program 2 (id=480): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000000)={0x21, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @lang_id={0x0, 0x3, 0x814}}}, 0x0) 1.154174658s ago: executing program 0 (id=481): syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x101000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/user\x00') syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x88, &(0x7f00000009c0), 0x3, 0x438, &(0x7f0000000580)="$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") syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x4, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0xc8c9, 0x4002, 0x5e51, 0xfffffffffffffffe, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x2, 0x0, 0x5, 0x5}, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xe042, 0x0) 739.249426ms ago: executing program 0 (id=482): r0 = gettid() pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01"], 0xd4}}, 0x8818) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x40086e8b, &(0x7f00000001c0)={@id={0x2, 0x0, @d}}) 686.483887ms ago: executing program 3 (id=483): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0xf, 0x0, 0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 672.080107ms ago: executing program 1 (id=484): writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a117436c379020000000000030058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00", 0x46}], 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 468.119782ms ago: executing program 1 (id=485): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000003c0)={[{@nodiscard}, {}, {@background_gc_on}, {@alloc_mode_reuse}, {@noquota}, {@disable_roll_forward}, {@gc_merge}, {@nouser_xattr}, {@alloc_mode_reuse}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@block_mode}, {@noinline_dentry}]}, 0x2, 0x5505, &(0x7f0000002480)="$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") r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1811e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x183341, 0x2) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) r4 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r4, 0x0, 0xfc01, 0x1000f4) creat(&(0x7f0000000180)='./bus\x00', 0x9b00000000000009) 360.446384ms ago: executing program 0 (id=486): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r2, &(0x7f00000002c0)=ANY=[], 0x14) 0s ago: executing program 3 (id=487): openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143041, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, 0x0, 0x20000000) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x40881}, 0x800) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x40) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) write$proc_mixer(r1, &(0x7f0000000100)=ANY=[], 0xb0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x1a1100, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f00005b1000/0x1000)=nil, 0x1000, 0x2, 0x12, r3, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.41' (ED25519) to the list of known hosts. [ 79.580512][ T5774] cgroup: Unknown subsys name 'net' [ 79.719898][ T5774] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.364371][ T5774] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.080116][ T5801] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.103008][ T5801] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.106872][ T5793] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.116831][ T5797] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.124895][ T5801] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.132822][ T5799] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.134091][ T5797] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.140658][ T5799] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.147772][ T5801] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.157273][ T5799] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.163019][ T5797] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.168973][ T5799] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.175975][ T5801] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.189478][ T5799] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.189491][ T5797] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.190450][ T5797] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.212922][ T5799] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.213993][ T5797] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.227735][ T5801] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.232134][ T5799] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.235366][ T5801] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.249509][ T5797] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.250962][ T5799] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.265211][ T5799] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.690254][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 83.813580][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 83.919505][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.926805][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.935265][ T5791] bridge_slave_0: entered allmulticast mode [ 83.942676][ T5791] bridge_slave_0: entered promiscuous mode [ 83.963945][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 84.005028][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.017424][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.024750][ T5791] bridge_slave_1: entered allmulticast mode [ 84.033060][ T5791] bridge_slave_1: entered promiscuous mode [ 84.111493][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.124024][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.133731][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 84.212897][ T5791] team0: Port device team_slave_0 added [ 84.230276][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.237633][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.245675][ T5786] bridge_slave_0: entered allmulticast mode [ 84.254049][ T5786] bridge_slave_0: entered promiscuous mode [ 84.263830][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.270951][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.278161][ T5786] bridge_slave_1: entered allmulticast mode [ 84.285560][ T5786] bridge_slave_1: entered promiscuous mode [ 84.294369][ T5791] team0: Port device team_slave_1 added [ 84.310243][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.317627][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.324958][ T5785] bridge_slave_0: entered allmulticast mode [ 84.331921][ T5785] bridge_slave_0: entered promiscuous mode [ 84.389035][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.396493][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.404088][ T5785] bridge_slave_1: entered allmulticast mode [ 84.411026][ T5785] bridge_slave_1: entered promiscuous mode [ 84.421159][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.433758][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.496279][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.503405][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.530484][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.544768][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.552531][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.579374][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.610993][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.624478][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.659497][ T5786] team0: Port device team_slave_0 added [ 84.703101][ T5786] team0: Port device team_slave_1 added [ 84.716189][ T5791] hsr_slave_0: entered promiscuous mode [ 84.723042][ T5791] hsr_slave_1: entered promiscuous mode [ 84.756313][ T5785] team0: Port device team_slave_0 added [ 84.787454][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.795201][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.822712][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.836229][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.843646][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.850833][ T5787] bridge_slave_0: entered allmulticast mode [ 84.858392][ T5787] bridge_slave_0: entered promiscuous mode [ 84.866975][ T5785] team0: Port device team_slave_1 added [ 84.897544][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.904696][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.930930][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.944917][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.952188][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.959409][ T5787] bridge_slave_1: entered allmulticast mode [ 84.966452][ T5787] bridge_slave_1: entered promiscuous mode [ 84.996155][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.003343][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.029504][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.047640][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.054692][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.081119][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.117053][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.143054][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.199545][ T5786] hsr_slave_0: entered promiscuous mode [ 85.206491][ T5786] hsr_slave_1: entered promiscuous mode [ 85.213278][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.221141][ T5786] Cannot create hsr debugfs directory [ 85.246524][ T5787] team0: Port device team_slave_0 added [ 85.280069][ T5785] hsr_slave_0: entered promiscuous mode [ 85.283126][ T50] Bluetooth: hci3: command tx timeout [ 85.287027][ T5799] Bluetooth: hci1: command tx timeout [ 85.297786][ T5785] hsr_slave_1: entered promiscuous mode [ 85.304034][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.311599][ T5785] Cannot create hsr debugfs directory [ 85.330559][ T5787] team0: Port device team_slave_1 added [ 85.362111][ T5799] Bluetooth: hci0: command tx timeout [ 85.362131][ T50] Bluetooth: hci2: command tx timeout [ 85.445206][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.452914][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.479015][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.495596][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.502683][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.528724][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.646661][ T5787] hsr_slave_0: entered promiscuous mode [ 85.653343][ T5787] hsr_slave_1: entered promiscuous mode [ 85.659595][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.667271][ T5787] Cannot create hsr debugfs directory [ 85.873225][ T5791] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.884862][ T5791] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.915956][ T5791] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.926513][ T5791] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.012741][ T5786] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.024952][ T5786] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.037023][ T5786] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.047065][ T5786] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.133297][ T5785] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.176020][ T5785] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.217121][ T5785] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.228474][ T5785] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.241488][ T5787] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.256214][ T5787] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.267237][ T5787] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.278925][ T5787] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.350361][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.397876][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.451178][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.483922][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.491254][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.504844][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.512049][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.551876][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.580822][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.588073][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.606988][ T2908] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.614151][ T2908] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.710451][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.733729][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.761163][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.794720][ T2908] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.801939][ T2908] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.820516][ T2908] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.827738][ T2908] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.890966][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.957390][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.964626][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.011773][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.018995][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.052795][ T5787] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.147282][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.206338][ T5785] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 87.224516][ T5785] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.353074][ T5791] veth0_vlan: entered promiscuous mode [ 87.365260][ T5799] Bluetooth: hci3: command tx timeout [ 87.367497][ T50] Bluetooth: hci1: command tx timeout [ 87.393287][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.442530][ T50] Bluetooth: hci2: command tx timeout [ 87.442578][ T5799] Bluetooth: hci0: command tx timeout [ 87.506426][ T5791] veth1_vlan: entered promiscuous mode [ 87.600247][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.622996][ T5786] veth0_vlan: entered promiscuous mode [ 87.647554][ T5791] veth0_macvtap: entered promiscuous mode [ 87.658620][ T5791] veth1_macvtap: entered promiscuous mode [ 87.668975][ T5786] veth1_vlan: entered promiscuous mode [ 87.696038][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.751270][ T5787] veth0_vlan: entered promiscuous mode [ 87.780675][ T5787] veth1_vlan: entered promiscuous mode [ 87.790322][ T5786] veth0_macvtap: entered promiscuous mode [ 87.803809][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.819284][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.838081][ T5786] veth1_macvtap: entered promiscuous mode [ 87.849394][ T5791] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.860268][ T5791] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.869115][ T5791] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.877983][ T5791] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.961450][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.977474][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.989893][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.001599][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.013257][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.024736][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.066232][ T5785] veth0_vlan: entered promiscuous mode [ 88.090841][ T5786] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.100094][ T5786] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.109793][ T5786] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.118783][ T5786] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.152779][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.164602][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.184085][ T5787] veth0_macvtap: entered promiscuous mode [ 88.202879][ T5785] veth1_vlan: entered promiscuous mode [ 88.217234][ T5787] veth1_macvtap: entered promiscuous mode [ 88.258415][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.269955][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.280262][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.291272][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.303624][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.320164][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.332390][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.342371][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.354215][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.367191][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.389610][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.398287][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.404765][ T5787] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.416226][ T5787] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.425571][ T5787] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.434345][ T5787] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.469465][ T2908] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.499471][ T2908] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.546307][ T5785] veth0_macvtap: entered promiscuous mode [ 88.580868][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.601908][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.631565][ T5785] veth1_macvtap: entered promiscuous mode [ 88.670641][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.700888][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.766339][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.777774][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.788237][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.798938][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.810639][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.031685][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.131168][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.251551][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.353648][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.373948][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.432848][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.465145][ T5799] Bluetooth: hci1: command tx timeout [ 89.471059][ T5799] Bluetooth: hci3: command tx timeout [ 89.523570][ T5799] Bluetooth: hci2: command tx timeout [ 89.529188][ T50] Bluetooth: hci0: command tx timeout [ 89.568450][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.579427][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.595508][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.608471][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.628865][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.649650][ T5785] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.659047][ T5785] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.669560][ T5785] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.679511][ T5785] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.937454][ T5890] syz.0.1[5890]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 90.107022][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.120847][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.701619][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.737878][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.486321][ T5900] Zero length message leads to an empty skb [ 92.119516][ T788] cfg80211: failed to load regulatory.db [ 92.202199][ T50] Bluetooth: hci3: command tx timeout [ 92.207671][ T50] Bluetooth: hci1: command tx timeout [ 92.213318][ T50] Bluetooth: hci0: command tx timeout [ 92.218741][ T50] Bluetooth: hci2: command tx timeout [ 92.361050][ T5902] loop2: detected capacity change from 0 to 16 [ 92.688958][ T5902] ======================================================= [ 92.688958][ T5902] WARNING: The mand mount option has been deprecated and [ 92.688958][ T5902] and is ignored by this kernel. Remove the mand [ 92.688958][ T5902] option from the mount to silence this warning. [ 92.688958][ T5902] ======================================================= [ 92.721783][ C1] sched: RT throttling activated [ 93.665825][ T5902] erofs: (device loop2): mounted with root inode @ nid 36. [ 95.935111][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.944147][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.242376][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 96.722345][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 97.266571][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.392136][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.502199][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.510748][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.522659][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 97.752012][ T5929] loop1: detected capacity change from 0 to 4096 [ 97.782068][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 99.847078][ T5940] loop3: detected capacity change from 0 to 2048 [ 100.461313][ T5940] Alternate GPT is invalid, using primary GPT. [ 100.499957][ T5940] loop3: p2 p3 p7 [ 100.686145][ T5795] udevd[5795]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 100.686488][ T5934] udevd[5934]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 100.719327][ T5798] udevd[5798]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 100.813287][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 101.091986][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 101.126719][ T23] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 101.136174][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.147135][ T23] usb 1-1: Product: syz [ 101.152033][ T23] usb 1-1: Manufacturer: syz [ 101.157677][ T23] usb 1-1: SerialNumber: syz [ 101.405257][ T23] usb 1-1: config 0 descriptor?? [ 101.417409][ T23] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 101.551981][ T23] usb 1-1: Detected FT232H [ 102.001648][ T23] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 102.236434][ T5965] loop3: detected capacity change from 0 to 512 [ 103.233589][ T5965] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.24: bad orphan inode 15 [ 103.269986][ T5974] loop1: detected capacity change from 0 to 512 [ 103.314709][ T5965] ext4_test_bit(bit=14, block=5) = 0 [ 103.321907][ T5965] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.585495][ T5972] loop2: detected capacity change from 0 to 40427 [ 103.617093][ T5972] F2FS-fs (loop2): invalid crc value [ 103.634569][ T5972] F2FS-fs (loop2): Found nat_bits in checkpoint [ 103.675696][ T23] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 103.707635][ T5974] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.730677][ T5972] F2FS-fs (loop2): Start checkpoint disabled! [ 103.732931][ T23] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 103.763769][ T5974] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.775261][ T5972] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 103.928298][ T23] usb 1-1: USB disconnect, device number 2 [ 104.082313][ T5971] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 104.310396][ T23] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 104.318673][ T5974] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 104.337099][ T23] ftdi_sio 1-1:0.0: device disconnected [ 104.350911][ T5983] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1792 out of range 0-6 [ 104.362602][ T5983] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 104.372855][ T5983] EXT4-fs error (device loop1): ext4_acquire_dquot:6940: comm syz.1.26: Failed to acquire dquot type 1 [ 104.475780][ T5791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.574557][ T5799] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 104.577571][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.585000][ T5799] Bluetooth: hci1: Injecting HCI hardware error event [ 104.601258][ T50] Bluetooth: hci1: hardware error 0x00 [ 104.737238][ T3465] kworker/u4:8: attempt to access beyond end of device [ 104.737238][ T3465] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 104.796984][ T3465] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 104.832252][ T3465] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 104.839191][ T3465] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 105.145472][ T5990] loop0: detected capacity change from 0 to 40427 [ 105.177278][ T5990] F2FS-fs (loop0): invalid crc value [ 105.887443][ T5990] F2FS-fs (loop0): Found nat_bits in checkpoint [ 105.925019][ T5990] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 106.261492][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 106.951934][ T50] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 106.964814][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 106.972357][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 107.016940][ T5787] syz-executor: attempt to access beyond end of device [ 107.016940][ T5787] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 107.068702][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 107.089877][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 107.098041][ T5787] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 108.150594][ T6007] loop1: detected capacity change from 0 to 256 [ 108.249354][ T6007] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011d5f, chksum : 0x09863542, utbl_chksum : 0x000cd30d) [ 109.023572][ T6016] tipc: Can't bind to reserved service type 0 [ 109.795153][ T6015] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 109.870647][ T6013] loop1: detected capacity change from 0 to 8192 [ 109.947706][ T6013] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 110.117610][ T6013] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 110.131458][ T6013] FAT-fs (loop1): Filesystem has been set read-only [ 110.139586][ T6013] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 110.149016][ T6013] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 110.403188][ T5786] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 111.553256][ T5776] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 111.579721][ T5776] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 111.618900][ T5776] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 111.635355][ T5776] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 111.652301][ T5776] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 111.663149][ T5776] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 111.670764][ T5776] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 111.678922][ T5776] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 111.686776][ T5776] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 111.694854][ T5776] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 111.702699][ T5776] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 111.711537][ T5776] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 111.719495][ T5776] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 111.727550][ T5776] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 111.735319][ T5776] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 111.767401][ T5776] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 111.789390][ T5776] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 111.812279][ T5776] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 111.820650][ T5776] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 111.922882][ T5776] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 112.680413][ T5776] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 112.861904][ T5776] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 112.985572][ T5776] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 113.023796][ T5776] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 113.045777][ T5776] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 113.071978][ T5776] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 113.135767][ T5776] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 113.147238][ T5776] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 113.441325][ T5776] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 113.463026][ T5776] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 113.471314][ T5776] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 113.489111][ T5776] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 113.502332][ T5776] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 113.509856][ T5776] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 113.524684][ T5776] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 113.553361][ T5776] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 113.561928][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 113.569683][ T5776] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 113.597404][ T5776] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 113.607519][ T5776] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 113.620232][ T5776] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 113.637821][ T5776] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 113.660031][ T5776] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 113.668298][ T5776] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 113.700754][ T5776] hid-generic 0000:0000:0000.0001: hidraw0: HID v8.00 Device [syz0] on syz0 [ 113.765642][ T23] usb 2-1: too many configurations: 55, using maximum allowed: 8 [ 113.801293][ T23] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 113.829796][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.855265][ T23] usb 2-1: Product: syz [ 113.866050][ T6042] loop0: detected capacity change from 0 to 4096 [ 113.869831][ T23] usb 2-1: Manufacturer: syz [ 113.879984][ T23] usb 2-1: SerialNumber: syz [ 113.951465][ T6041] fido_id[6041]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 114.006814][ T5830] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 114.152301][ T6036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.163343][ T6036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.234398][ T5830] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 114.253066][ T5830] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 114.283461][ T5830] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 114.302884][ T5830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.537943][ T5830] usb 4-1: usb_control_msg returned -32 [ 114.543894][ T5830] usbtmc 4-1:16.0: can't read capabilities [ 115.079960][ T23] rtl8150 2-1:1.0: couldn't reset the device [ 115.091248][ T23] rtl8150: probe of 2-1:1.0 failed with error -5 [ 115.625720][ T6057] 9pnet_fd: Insufficient options for proto=fd [ 115.690366][ T6057] input: syz1 as /devices/virtual/input/input5 [ 116.874122][ T5830] usb 2-1: USB disconnect, device number 2 [ 116.923531][ T8] usb 4-1: USB disconnect, device number 2 [ 117.009166][ T6069] syzkaller0: entered promiscuous mode [ 117.026047][ T6069] syzkaller0: entered allmulticast mode [ 118.513068][ T6076] loop0: detected capacity change from 0 to 32768 [ 118.576391][ T6076] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 118.666248][ T6076] XFS (loop0): Ending clean mount [ 118.738275][ T28] audit: type=1800 audit(1758586906.988:2): pid=6076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.50" name="file7" dev="loop0" ino=6153 res=0 errno=0 [ 118.880751][ T28] audit: type=1800 audit(1758586907.128:3): pid=6076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.50" name="file1" dev="loop0" ino=6150 res=0 errno=0 [ 119.063040][ T6090] loop3: detected capacity change from 0 to 32768 [ 119.101091][ T6090] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 119.136490][ T5787] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 119.181965][ T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 119.301318][ T6090] XFS (loop3): Ending clean mount [ 119.320461][ T6090] XFS (loop3): Quotacheck needed: Please wait. [ 119.371923][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 119.381104][ T8] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 119.388756][ T6090] XFS (loop3): Quotacheck: Done. [ 119.404341][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 119.471469][ T5791] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 119.480840][ T8] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 119.521663][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.542401][ T8] usb 3-1: Product: syz [ 119.550324][ T8] usb 3-1: Manufacturer: syz [ 119.565148][ T8] usb 3-1: SerialNumber: syz [ 119.872420][ T8] usb 3-1: 0:2 : does not exist [ 119.894438][ T8] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 120.918470][ T6121] syzkaller0: entered promiscuous mode [ 120.933643][ T6121] syzkaller0: entered allmulticast mode [ 121.017067][ T8] usb 3-1: USB disconnect, device number 2 [ 121.265856][ T5795] udevd[5795]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 124.539658][ T6161] syzkaller0: entered promiscuous mode [ 124.545555][ T6161] syzkaller0: entered allmulticast mode [ 124.609510][ T6160] loop0: detected capacity change from 0 to 4096 [ 124.678551][ T6160] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 124.791909][ T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 125.950755][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e9b6c00: rx timeout, send abort [ 125.962357][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805e9b6c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 127.270415][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 127.278074][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.309597][ T23] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 127.377213][ T23] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 127.410357][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.630778][ T23] usb 2-1: Product: syz [ 127.635189][ T23] usb 2-1: Manufacturer: syz [ 127.639820][ T23] usb 2-1: SerialNumber: syz [ 127.664586][ T23] usb 2-1: config 0 descriptor?? [ 127.759304][ T23] usb 2-1: USB disconnect, device number 3 [ 130.568199][ T27] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 130.760900][ T6221] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 130.774001][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 130.781323][ T27] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.800137][ T27] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 130.819730][ T6218] loop3: detected capacity change from 0 to 32768 [ 130.852099][ T27] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 130.863199][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.894163][ T27] usb 2-1: Product: syz [ 130.898386][ T27] usb 2-1: Manufacturer: syz [ 130.901963][ T6218] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 130.903040][ T27] usb 2-1: SerialNumber: syz [ 130.933679][ T27] usb 2-1: config 0 descriptor?? [ 130.992469][ T6228] tipc: Enabling of bearer rejected, failed to enable media [ 131.002431][ T6228] syzkaller0: entered promiscuous mode [ 131.007981][ T6228] syzkaller0: entered allmulticast mode [ 131.089567][ T6218] XFS (loop3): Ending clean mount [ 131.205606][ T5791] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 131.370920][ T5875] usb 2-1: USB disconnect, device number 4 [ 132.155033][ T23] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 132.951863][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 132.967476][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.986011][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.998377][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.117960][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 133.227645][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 133.326935][ T23] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 133.453377][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 133.692570][ T23] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 133.711880][ T23] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 133.720019][ T23] usb 3-1: Manufacturer: syz [ 133.728151][ T23] usb 3-1: config 0 descriptor?? [ 134.354263][ T6271] tipc: Enabling of bearer rejected, failed to enable media [ 134.373046][ T6271] syzkaller0: entered promiscuous mode [ 134.378655][ T6271] syzkaller0: entered allmulticast mode [ 134.411897][ T23] rc_core: IR keymap rc-hauppauge not found [ 134.426908][ T23] Registered IR keymap rc-empty [ 134.438474][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 134.493559][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 134.544242][ T23] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 134.579308][ T23] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input6 [ 134.601588][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 134.651984][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 134.692879][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 134.732170][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 134.783045][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 134.837481][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 134.891956][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 134.942125][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 134.985264][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 135.029280][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 135.108866][ T23] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 135.246712][ T23] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 135.716550][ T23] usb 3-1: USB disconnect, device number 3 [ 135.832883][ T5875] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 136.032291][ T5875] usb 4-1: Using ep0 maxpacket: 8 [ 136.074679][ T5875] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.264511][ T5875] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 136.596684][ T5875] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 136.616244][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.651805][ T5875] usb 4-1: Product: syz [ 136.661870][ T5875] usb 4-1: Manufacturer: syz [ 136.677506][ T5875] usb 4-1: SerialNumber: syz [ 136.708866][ T5875] usb 4-1: config 0 descriptor?? [ 138.017460][ T8] usb 4-1: USB disconnect, device number 3 [ 138.040353][ T6302] binder: BINDER_SET_CONTEXT_MGR already set [ 138.050828][ T6302] binder: 6301:6302 ioctl 4018620d 200000004a80 returned -16 [ 138.414855][ T28] audit: type=1326 audit(1758586926.658:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6307 comm="syz.2.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f798eec9 code=0x7ffc0000 [ 138.451676][ T28] audit: type=1326 audit(1758586926.658:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6307 comm="syz.2.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f798eec9 code=0x7ffc0000 [ 138.481974][ T28] audit: type=1326 audit(1758586926.658:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6307 comm="syz.2.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f87f798eec9 code=0x7ffc0000 [ 138.505459][ T28] audit: type=1326 audit(1758586926.658:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6307 comm="syz.2.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f798eec9 code=0x7ffc0000 [ 138.528019][ T28] audit: type=1326 audit(1758586926.658:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6307 comm="syz.2.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f798eec9 code=0x7ffc0000 [ 138.591965][ T28] audit: type=1326 audit(1758586926.658:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6307 comm="syz.2.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f87f798eec9 code=0x7ffc0000 [ 138.648134][ T28] audit: type=1326 audit(1758586926.658:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6307 comm="syz.2.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f798eec9 code=0x7ffc0000 [ 138.711908][ T5876] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 138.851395][ T28] audit: type=1326 audit(1758586926.658:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6307 comm="syz.2.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f87f798eec9 code=0x7ffc0000 [ 138.973143][ T28] audit: type=1326 audit(1758586926.658:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6307 comm="syz.2.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f798eec9 code=0x7ffc0000 [ 138.995993][ T28] audit: type=1326 audit(1758586926.668:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6307 comm="syz.2.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f87f798eec9 code=0x7ffc0000 [ 139.707766][ T5876] usb 2-1: Using ep0 maxpacket: 16 [ 139.764478][ T5876] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.781869][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 139.799186][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 139.821708][ T5876] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 139.841234][ T5876] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 139.859925][ T6320] loop0: detected capacity change from 0 to 1024 [ 139.864078][ T5876] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 139.893004][ T5876] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 139.904881][ T5876] usb 2-1: Manufacturer: syz [ 139.917924][ T5876] usb 2-1: config 0 descriptor?? [ 140.062969][ T40] hfsplus: b-tree write err: -5, ino 4 [ 140.231994][ T5876] rc_core: IR keymap rc-hauppauge not found [ 140.239237][ T5876] Registered IR keymap rc-empty [ 140.246795][ T5876] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 140.282438][ T5876] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 140.367163][ T5876] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 140.405142][ T5876] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input8 [ 140.565703][ T5876] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 140.602980][ T5876] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 140.646389][ T5876] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 140.682881][ T5876] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 140.740568][ T5876] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 140.803227][ T5876] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 140.832791][ T5876] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 140.862495][ T5876] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 140.902735][ T5876] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 140.932727][ T5876] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 140.987830][ T5876] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 141.008146][ T5876] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 141.166637][ T5876] usb 2-1: USB disconnect, device number 5 [ 142.189578][ T6354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.138'. [ 142.277119][ T6346] loop0: detected capacity change from 0 to 32768 [ 142.316188][ T6346] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.134 (6346) [ 142.359291][ T6346] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 142.370429][ T6346] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 142.379915][ T6346] BTRFS info (device loop0): enabling ssd optimizations [ 142.387526][ T6346] BTRFS info (device loop0): using spread ssd allocation scheme [ 142.395390][ T6346] BTRFS info (device loop0): setting nodatacow, compression disabled [ 142.404770][ T6346] BTRFS info (device loop0): not using ssd optimizations [ 142.415698][ T6346] BTRFS info (device loop0): not using spread ssd allocation scheme [ 142.424044][ T6346] BTRFS info (device loop0): max_inline at 0 [ 142.430927][ T6346] BTRFS info (device loop0): using free space tree [ 142.480756][ T6346] BTRFS info (device loop0): auto enabling async discard [ 142.619292][ T6358] loop3: detected capacity change from 0 to 512 [ 142.672472][ T6358] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 142.852840][ T5787] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 143.512928][ T5876] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 143.722137][ T5876] usb 2-1: Using ep0 maxpacket: 16 [ 143.736566][ T5876] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.761432][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 143.778963][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 143.788987][ T5876] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 143.841659][ T5876] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.922995][ T5876] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 143.972228][ T5876] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 143.980293][ T5876] usb 2-1: Manufacturer: syz [ 144.039750][ T5876] usb 2-1: config 0 descriptor?? [ 144.072934][ T6394] dvmrp1: tun_chr_ioctl cmd 1074025680 [ 145.361844][ T5876] rc_core: IR keymap rc-hauppauge not found [ 145.457197][ T5876] Registered IR keymap rc-empty [ 145.462875][ T5876] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 145.492393][ T5876] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 145.670170][ T5876] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 145.686230][ T5876] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input9 [ 145.702864][ T5876] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 145.732054][ T5876] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 146.941905][ T5876] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 146.991896][ T5876] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 147.022072][ T5876] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 147.064416][ T5876] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 147.112022][ T5876] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 147.150933][ T5876] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 147.198302][ T5876] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 147.257959][ T6417] process 'syz.3.153' launched '/dev/fd/5' with NULL argv: empty string added [ 147.270373][ T5876] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 147.319919][ T5876] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 147.344509][ T5876] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 147.380990][ T5876] usb 2-1: USB disconnect, device number 6 [ 147.564935][ T6416] loop1: detected capacity change from 0 to 512 [ 147.577610][ T6416] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 147.812716][ T787] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 148.089082][ T787] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 148.097514][ T787] usb 1-1: config 0 has no interface number 0 [ 148.116587][ T787] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 148.125985][ T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.134326][ T787] usb 1-1: Product: syz [ 148.138669][ T787] usb 1-1: Manufacturer: syz [ 148.149073][ T787] usb 1-1: SerialNumber: syz [ 148.198405][ T787] usb 1-1: config 0 descriptor?? [ 148.948140][ T787] asix 1-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 148.987064][ T787] asix: probe of 1-1:0.251 failed with error -524 [ 149.052071][ T5876] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 149.262049][ T5876] usb 3-1: Using ep0 maxpacket: 16 [ 149.281897][ T5876] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.293338][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 149.293490][ T9] usb 1-1: USB disconnect, device number 3 [ 149.304954][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 149.385355][ T5876] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 149.438114][ T5876] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 149.458476][ T5876] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 149.468003][ T5876] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 149.477071][ T5876] usb 3-1: Manufacturer: syz [ 149.487977][ T5876] usb 3-1: config 0 descriptor?? [ 150.343264][ T5876] rc_core: IR keymap rc-hauppauge not found [ 150.349230][ T5876] Registered IR keymap rc-empty [ 150.374683][ T5876] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 150.431921][ T5876] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 150.475017][ T5876] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 150.493400][ T5876] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input10 [ 150.530924][ T5876] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 150.565636][ T5876] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 150.614707][ T5876] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 150.662010][ T5876] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 150.709378][ T5876] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 150.781642][ T5876] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 150.812029][ T5876] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 150.812050][ T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 150.843150][ T5876] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 150.952164][ T6455] loop1: detected capacity change from 0 to 1024 [ 150.981102][ T5876] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 151.033773][ T6455] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 151.044786][ T6455] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 151.138262][ T6455] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 151.242544][ T5876] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 151.504284][ T5876] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 151.539825][ T5876] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 151.576793][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.623928][ T5876] usb 3-1: USB disconnect, device number 4 [ 151.701071][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.736031][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.772136][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 151.810492][ T8] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 151.829913][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.860262][ T8] usb 1-1: config 0 descriptor?? [ 151.914173][ T6458] loop3: detected capacity change from 0 to 512 [ 151.954145][ T6458] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 152.402080][ T50] Bluetooth: hci0: command tx timeout [ 152.891224][ T8] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 152.935368][ T8] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 153.303690][ T6477] loop2: detected capacity change from 0 to 32768 [ 153.311725][ T6477] XFS: ikeep mount option is deprecated. [ 153.338302][ T6477] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 153.458115][ T6481] loop1: detected capacity change from 0 to 1024 [ 153.962136][ T6477] XFS (loop2): Ending clean mount [ 153.973981][ T6477] XFS (loop2): Quotacheck needed: Please wait. [ 154.178882][ T6477] XFS (loop2): Quotacheck: Done. [ 154.282638][ T3465] hfsplus: b-tree write err: -5, ino 4 [ 154.628389][ T787] usb 1-1: USB disconnect, device number 4 [ 154.875364][ T6498] loop1: detected capacity change from 0 to 40427 [ 154.888178][ T6498] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 154.896011][ T6498] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 154.909078][ T6498] F2FS-fs (loop1): Unrecognized mount option "b2Q݂4pitӟ"@2 =???#ѳ" or missing value [ 155.136838][ T5785] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 155.373049][ T787] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 156.141969][ T787] usb 1-1: Using ep0 maxpacket: 16 [ 156.251229][ T787] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.262103][ T787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 156.276709][ T787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 156.289518][ T787] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 156.302127][ T787] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 156.326553][ T787] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 156.335778][ T787] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 156.350178][ T787] usb 1-1: Manufacturer: syz [ 156.389159][ T787] usb 1-1: config 0 descriptor?? [ 157.126128][ T6511] loop2: detected capacity change from 0 to 512 [ 157.170800][ T6511] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 157.261921][ T787] rc_core: IR keymap rc-hauppauge not found [ 157.284095][ T787] Registered IR keymap rc-empty [ 157.307850][ T787] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 157.320897][ T6525] loop3: detected capacity change from 0 to 128 [ 157.337488][ T6525] EXT4-fs: Ignoring removed nobh option [ 157.362026][ T787] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 157.393285][ T6525] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 157.409689][ T787] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 157.479652][ T6525] ext4 filesystem being mounted at /51/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 157.505253][ T787] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input12 [ 157.563187][ T787] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 157.668246][ T787] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 157.723763][ T787] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 157.771997][ T787] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 157.781361][ T5791] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 157.850948][ T787] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 157.901943][ T787] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 157.941940][ T787] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 157.982111][ T787] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 158.022148][ T787] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 158.072021][ T787] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 158.321070][ T787] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 158.331514][ T787] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 158.345625][ T787] usb 1-1: USB disconnect, device number 5 [ 159.960551][ T6561] loop1: detected capacity change from 0 to 512 [ 159.963715][ T5876] libceph: connect (1)[c::]:6789 error -101 [ 159.979241][ T5876] libceph: mon0 (1)[c::]:6789 connect error [ 159.986611][ T6558] ceph: No mds server is up or the cluster is laggy [ 160.007745][ T6561] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 160.065355][ T6542] loop3: detected capacity change from 0 to 32768 [ 160.182239][ T6542] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 160.305727][ T6542] XFS (loop3): Ending clean mount [ 160.364319][ T6542] XFS (loop3): Quotacheck needed: Please wait. [ 160.456959][ T6542] XFS (loop3): Quotacheck: Done. [ 160.610928][ T5791] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 161.196066][ T5830] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 161.510961][ T5830] usb 1-1: Using ep0 maxpacket: 16 [ 161.529834][ T5830] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.566601][ T5830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 161.598595][ T5830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 161.622370][ T5830] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 161.649512][ T5830] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 161.737786][ T5830] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 161.760527][ T5830] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 161.779500][ T5830] usb 1-1: Manufacturer: syz [ 161.796394][ T5830] usb 1-1: config 0 descriptor?? [ 162.174153][ T5830] rc_core: IR keymap rc-hauppauge not found [ 162.188605][ T5830] Registered IR keymap rc-empty [ 162.193011][ T6580] loop1: detected capacity change from 0 to 40427 [ 162.199689][ T5830] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 162.243504][ T5830] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 162.251314][ T6580] F2FS-fs (loop1): build fault injection attr: rate: 14, type: 0x7ffff [ 162.283152][ T5830] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 162.310866][ T5830] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input13 [ 162.438185][ T5830] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 162.733975][ T5830] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 162.832528][ T5830] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 162.863481][ T5830] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 162.902354][ T5830] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 162.942112][ T5830] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 162.982065][ T5830] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 163.034842][ T5830] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 163.072021][ T5830] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 163.352005][ T5830] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 165.118161][ T5830] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 165.185924][ T5830] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 165.313975][ T5830] usb 1-1: USB disconnect, device number 6 [ 165.420888][ T27] libceph: connect (1)[c::]:6789 error -101 [ 165.439714][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 165.440728][ T6599] loop3: detected capacity change from 0 to 512 [ 165.462430][ T6599] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 165.487992][ T6610] ceph: No mds server is up or the cluster is laggy [ 165.523197][ T6614] tipc: Started in network mode [ 165.528331][ T6614] tipc: Node identity de386e05c8f3, cluster identity 4711 [ 165.539998][ T6614] tipc: Enabled bearer , priority 0 [ 165.572240][ T6614] syzkaller0: entered promiscuous mode [ 165.590287][ T6614] syzkaller0: entered allmulticast mode [ 165.660653][ T6614] tipc: Resetting bearer [ 165.681348][ T6613] tipc: Resetting bearer [ 165.706650][ T6613] tipc: Disabling bearer [ 168.028206][ T8] IPVS: starting estimator thread 0... [ 168.343390][ T6639] IPVS: using max 16 ests per chain, 38400 per kthread [ 168.642464][ T6650] overlay: ./bus is not a directory [ 168.761897][ T27] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 168.978791][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 168.988591][ T27] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.995028][ T6654] loop3: detected capacity change from 0 to 32768 [ 169.003423][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 169.032009][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 169.045424][ T27] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 169.052236][ T6654] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 169.068152][ T27] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 169.086513][ T27] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 169.097526][ T27] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 169.106779][ T27] usb 2-1: Manufacturer: syz [ 169.116587][ T27] usb 2-1: config 0 descriptor?? [ 169.174209][ T6654] XFS (loop3): Ending clean mount [ 169.191682][ T6654] XFS (loop3): Quotacheck needed: Please wait. [ 169.245517][ T6654] XFS (loop3): Quotacheck: Done. [ 169.310727][ T5791] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 169.442936][ T27] rc_core: IR keymap rc-hauppauge not found [ 169.449036][ T27] Registered IR keymap rc-empty [ 169.454711][ T27] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 169.492427][ T27] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 169.505647][ T6666] ceph: No mds server is up or the cluster is laggy [ 169.545839][ T27] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 169.592386][ T27] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input14 [ 169.784098][ T27] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 169.812095][ T27] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 169.841873][ T27] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 169.872646][ T27] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 169.923224][ T27] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 169.955259][ T27] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 170.015911][ T27] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 170.134412][ T27] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 170.294008][ T27] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 170.561879][ T27] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 170.608247][ T27] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 170.682375][ T27] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 170.747636][ T27] usb 2-1: USB disconnect, device number 7 [ 173.461988][ T8] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 173.612482][ T787] libceph: connect (1)[c::]:6789 error -101 [ 173.631704][ T6677] loop2: detected capacity change from 0 to 40427 [ 173.638531][ T787] libceph: mon0 (1)[c::]:6789 connect error [ 173.703628][ T6703] ceph: No mds server is up or the cluster is laggy [ 173.726423][ T787] libceph: connect (1)[c::]:6789 error -101 [ 173.732857][ T787] libceph: mon0 (1)[c::]:6789 connect error [ 173.811899][ T8] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 173.819836][ T6709] ceph: No mds server is up or the cluster is laggy [ 174.002096][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 174.009369][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.021270][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.022006][ T787] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 174.031113][ T8] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 174.047732][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.057647][ T8] usb 4-1: config 0 descriptor?? [ 174.211876][ T787] usb 3-1: Using ep0 maxpacket: 16 [ 174.219393][ T787] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.231881][ T787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 174.243032][ T787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 174.252782][ T787] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 174.262597][ T787] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 174.281996][ T787] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 174.291101][ T787] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 174.299643][ T787] usb 3-1: Manufacturer: syz [ 174.306889][ T787] usb 3-1: config 0 descriptor?? [ 174.631209][ T8] ft260 0003:0403:6030.0003: unknown main item tag 0x7 [ 174.782077][ T5830] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 174.894653][ T8] ft260 0003:0403:6030.0003: chip code: 6424 8183 [ 174.982067][ T5830] usb 2-1: Using ep0 maxpacket: 16 [ 175.018930][ T5830] usb 2-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 175.030630][ T5830] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 175.055599][ T5830] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 175.065761][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.073967][ T5830] usb 2-1: Product: syz [ 175.078859][ T5830] usb 2-1: Manufacturer: syz [ 175.084459][ T5830] usb 2-1: SerialNumber: syz [ 175.132029][ T787] rc_core: IR keymap rc-hauppauge not found [ 175.138108][ T787] Registered IR keymap rc-empty [ 175.152275][ T787] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 175.175034][ T8] ft260 0003:0403:6030.0003: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 175.192998][ T787] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 175.242891][ T787] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 175.276291][ T787] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input15 [ 175.301102][ T787] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 175.324965][ T5830] usb 2-1: 0:2 : does not exist [ 175.340962][ T787] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 175.363047][ T5830] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 175.382485][ T787] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 175.391306][ T8] ft260 0003:0403:6030.0003: failed to retrieve status: -32, no wakeup [ 175.408598][ T5830] usb 2-1: USB disconnect, device number 8 [ 175.417737][ T787] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 175.452122][ T787] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 175.488335][ T5934] udevd[5934]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 175.506077][ T787] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 175.555553][ T787] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 175.595715][ T787] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 175.641939][ T787] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 175.646653][ T6695] ft260 0003:0403:6030.0003: ft260_hid_output_report_check_status: failed to start transfer, ret -38 [ 175.672976][ T787] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 175.706673][ T787] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 175.716131][ T787] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 175.732377][ T787] usb 3-1: USB disconnect, device number 5 [ 175.895419][ T6695] ft260 0003:0403:6030.0003: failed to reset I2C controller: -108 [ 176.063149][ T6731] netlink: 40 bytes leftover after parsing attributes in process `syz.0.240'. [ 176.204181][ T6735] loop0: detected capacity change from 0 to 16 [ 176.254101][ T5795] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 177.204757][ T6739] netlink: 12 bytes leftover after parsing attributes in process `syz.2.243'. [ 177.246369][ T9] usb 4-1: USB disconnect, device number 4 [ 177.432777][ T8] libceph: connect (1)[c::]:6789 error -101 [ 177.451263][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 177.482005][ T6742] ceph: No mds server is up or the cluster is laggy [ 177.665633][ T6754] input: syz1 as /devices/virtual/input/input16 [ 177.680666][ T8] kernel read not supported for file /bus/input/devices (pid: 8 comm: kworker/0:0) [ 180.836708][ T6773] loop2: detected capacity change from 0 to 512 [ 180.904222][ T6773] EXT4-fs (loop2): Test dummy encryption mode enabled [ 181.081068][ T6773] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.252: invalid indirect mapped block 2185560079 (level 0) [ 181.156034][ T6773] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.252: invalid indirect mapped block 2683928664 (level 1) [ 181.190999][ T6773] EXT4-fs (loop2): 1 truncate cleaned up [ 181.220237][ T6773] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.359109][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 183.370739][ T788] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 183.440541][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.588660][ T5830] libceph: connect (1)[c::]:6789 error -101 [ 183.596262][ T5830] libceph: mon0 (1)[c::]:6789 connect error [ 183.679597][ T6798] ceph: No mds server is up or the cluster is laggy [ 184.746231][ T6810] netlink: 12 bytes leftover after parsing attributes in process `syz.0.261'. [ 184.962249][ T5830] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 185.152063][ T5830] usb 3-1: Using ep0 maxpacket: 8 [ 185.166369][ T5830] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.180816][ T5830] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 185.340232][ T5830] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 185.349548][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.358593][ T5830] usb 3-1: Product: syz [ 185.365787][ T5830] usb 3-1: Manufacturer: syz [ 185.370649][ T5830] usb 3-1: SerialNumber: syz [ 185.378182][ T5830] usb 3-1: config 0 descriptor?? [ 185.455159][ T6822] input: syz1 as /devices/virtual/input/input17 [ 188.191518][ T5830] usb 3-1: USB disconnect, device number 6 [ 188.375448][ T27] libceph: connect (1)[c::]:6789 error -101 [ 188.387127][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 188.473183][ T6844] ceph: No mds server is up or the cluster is laggy [ 189.564869][ T6859] netlink: 12 bytes leftover after parsing attributes in process `syz.3.275'. [ 189.773092][ T5799] Bluetooth: hci0: command tx timeout [ 192.483466][ T8] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 192.523813][ T6892] netlink: 12 bytes leftover after parsing attributes in process `syz.3.287'. [ 194.436433][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.691939][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.890660][ T6905] loop3: detected capacity change from 0 to 1024 [ 194.928800][ T6905] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.063305][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 195.271822][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 195.293244][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.311903][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 195.324680][ T9] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 195.337528][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.345767][ T9] usb 3-1: Product: syz [ 195.350058][ T9] usb 3-1: Manufacturer: syz [ 195.354824][ T9] usb 3-1: SerialNumber: syz [ 195.374539][ T9] usb 3-1: config 0 descriptor?? [ 195.993826][ T5791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.596455][ T6937] syzkaller0: entered promiscuous mode [ 197.608068][ T6937] syzkaller0: entered allmulticast mode [ 197.698112][ T6939] netlink: 12 bytes leftover after parsing attributes in process `syz.3.300'. [ 198.519410][ T788] usb 3-1: USB disconnect, device number 7 [ 202.161792][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 202.294015][ T6964] loop3: detected capacity change from 0 to 16 [ 202.302253][ T6964] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 202.356509][ T6973] netlink: 12 bytes leftover after parsing attributes in process `syz.1.310'. [ 202.732029][ T8] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 203.412372][ T6962] ALSA: mixer_oss: invalid OSS volume '' [ 203.495378][ T6978] loop1: detected capacity change from 0 to 512 [ 203.530230][ T6978] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 203.559417][ T6978] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 203.654108][ T6978] EXT4-fs (loop1): 1 truncate cleaned up [ 203.673659][ T6978] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.731046][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.771431][ T6982] syzkaller0: entered promiscuous mode [ 203.791246][ T6982] syzkaller0: entered allmulticast mode [ 204.135705][ T27] libceph: connect (1)[c::]:6789 error -101 [ 204.142100][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 204.252619][ T6991] ceph: No mds server is up or the cluster is laggy [ 205.034133][ T7004] loop3: detected capacity change from 0 to 16 [ 205.067561][ T7004] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 205.997184][ T7003] ALSA: mixer_oss: invalid OSS volume '' [ 206.036726][ T8] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 206.164615][ T7008] loop1: detected capacity change from 0 to 512 [ 206.195011][ T7008] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 206.227333][ T7008] EXT4-fs (loop1): 1 truncate cleaned up [ 206.236656][ T7008] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.271966][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 206.287590][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.330322][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 206.353387][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.377097][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 206.421944][ T8] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 206.452029][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 206.483192][ T8] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 206.501841][ T8] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 206.519300][ T8] usb 3-1: Manufacturer: syz [ 206.538278][ T8] usb 3-1: config 0 descriptor?? [ 206.805003][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 206.811200][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 206.817746][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 207.021796][ T8] rc_core: IR keymap rc-hauppauge not found [ 207.027769][ T8] Registered IR keymap rc-empty [ 207.042643][ T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 207.076659][ T7013] loop3: detected capacity change from 0 to 32768 [ 207.083941][ T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 207.128933][ T7013] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 207.142382][ T8] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 207.160344][ T8] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input19 [ 207.182339][ T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 207.222219][ T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 207.278541][ T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 207.322445][ T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 207.334373][ T7013] XFS (loop3): Ending clean mount [ 207.402140][ T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 207.418421][ T7013] XFS (loop3): Quotacheck needed: Please wait. [ 207.454118][ T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 207.483300][ T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 207.491357][ T7013] XFS (loop3): Quotacheck: Done. [ 207.519836][ T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 207.605026][ T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 207.618270][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 207.618286][ T28] audit: type=1800 audit(1758586995.868:29): pid=7013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.324" name="file1" dev="loop3" ino=6150 res=0 errno=0 [ 207.692430][ T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 208.535367][ T8] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 208.547067][ T8] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 208.561140][ T8] usb 3-1: USB disconnect, device number 8 [ 208.618329][ T5791] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 208.627391][ T27] libceph: connect (1)[c::]:6789 error -101 [ 208.633716][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 208.670781][ T7047] ceph: No mds server is up or the cluster is laggy [ 208.688512][ T7054] loop2: detected capacity change from 0 to 16 [ 208.710493][ T7054] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 208.754724][ T7057] netlink: 12 bytes leftover after parsing attributes in process `syz.0.335'. [ 209.349520][ T7051] ALSA: mixer_oss: invalid OSS volume '' [ 209.815817][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 211.629002][ T7086] loop1: detected capacity change from 0 to 512 [ 211.701920][ T7086] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 211.807718][ T8] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 211.827893][ T7086] EXT4-fs (loop1): 1 truncate cleaned up [ 211.839445][ T7091] netlink: 12 bytes leftover after parsing attributes in process `syz.2.344'. [ 211.844603][ T7086] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.931232][ T7103] ceph: No mds server is up or the cluster is laggy [ 212.934173][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.959995][ T7124] loop1: detected capacity change from 0 to 512 [ 213.969859][ T7124] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 215.847907][ T7126] loop3: detected capacity change from 0 to 4096 [ 215.860382][ T7126] ntfs3: Unknown parameter 'discardRNdows_names' [ 216.230641][ T5934] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 216.986843][ T8] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 217.226815][ T7136] loop1: detected capacity change from 0 to 512 [ 217.234983][ T7138] netlink: 12 bytes leftover after parsing attributes in process `syz.2.358'. [ 217.248500][ T7136] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 218.172867][ T7136] EXT4-fs (loop1): 1 truncate cleaned up [ 218.441969][ T7136] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.930861][ T7157] virtio-fs: tag not found [ 218.949167][ T7153] ceph: No mds server is up or the cluster is laggy [ 219.089869][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.511952][ T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 219.620120][ T7172] netlink: 12 bytes leftover after parsing attributes in process `syz.2.369'. [ 220.353224][ T788] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 220.364375][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 220.373786][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.469173][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 220.480218][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 220.489990][ T8] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 220.499739][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 220.514287][ T8] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 220.532348][ T8] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 220.540392][ T8] usb 4-1: Manufacturer: syz [ 220.599944][ T8] usb 4-1: config 0 descriptor?? [ 221.918562][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d971800: rx timeout, send abort [ 221.928963][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805d971800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 222.331902][ T8] rc_core: IR keymap rc-hauppauge not found [ 222.348371][ T8] Registered IR keymap rc-empty [ 222.353878][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 222.411902][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 222.455189][ T8] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 222.484072][ T8] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input20 [ 222.515281][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 222.552233][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 222.582197][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 222.621944][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 222.631678][ T5876] libceph: connect (1)[c::]:6789 error -101 [ 222.641420][ T5876] libceph: mon0 (1)[c::]:6789 connect error [ 222.654968][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 222.672010][ T23] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 222.693251][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 222.722349][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 222.751976][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 222.782007][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 222.800447][ T7197] ceph: No mds server is up or the cluster is laggy [ 222.815325][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 222.864026][ T8] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 222.881212][ T8] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 222.889290][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 222.906073][ T8] usb 4-1: USB disconnect, device number 5 [ 222.906316][ T23] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 222.930254][ T23] usb 2-1: config 0 has no interface number 0 [ 222.937828][ T23] usb 2-1: config 0 interface 12 has no altsetting 0 [ 222.957370][ T23] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 222.969180][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.982432][ T23] usb 2-1: Product: syz [ 222.986646][ T23] usb 2-1: Manufacturer: syz [ 222.999244][ T23] usb 2-1: SerialNumber: syz [ 223.010911][ T23] usb 2-1: config 0 descriptor?? [ 223.465468][ T7208] netlink: 12 bytes leftover after parsing attributes in process `syz.0.380'. [ 223.811947][ T8] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 224.126467][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 224.131208][ T23] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 224.152439][ T23] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 224.159963][ T23] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 224.169569][ T23] f81534: probe of 2-1:0.12 failed with error -71 [ 224.550172][ T8] usb 4-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 224.567204][ T23] usb 2-1: USB disconnect, device number 9 [ 224.567599][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 224.595063][ T8] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 224.618137][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.626724][ T8] usb 4-1: Product: syz [ 224.638254][ T8] usb 4-1: Manufacturer: syz [ 224.643305][ T8] usb 4-1: SerialNumber: syz [ 224.854773][ T7223] loop2: detected capacity change from 0 to 16 [ 224.873745][ T7223] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 224.945591][ T8] usb 4-1: 0:2 : does not exist [ 224.957525][ T8] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 224.979228][ T7222] ALSA: mixer_oss: invalid OSS volume '' [ 225.147760][ T8] usb 4-1: USB disconnect, device number 6 [ 225.192054][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 225.798371][ T5795] udevd[5795]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 225.900522][ T788] libceph: connect (1)[c::]:6789 error -101 [ 225.906784][ T788] libceph: mon0 (1)[c::]:6789 connect error [ 226.030145][ T7235] block device autoloading is deprecated and will be removed. [ 226.056405][ T7227] ceph: No mds server is up or the cluster is laggy [ 226.352134][ T7235] md: md2 stopped. [ 228.381829][ T788] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 228.482499][ T27] libceph: connect (1)[c::]:6789 error -101 [ 228.572795][ T788] usb 2-1: Using ep0 maxpacket: 16 [ 228.582135][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 228.598073][ T788] usb 2-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 228.601605][ T27] libceph: connect (1)[c::]:6789 error -101 [ 228.623221][ T788] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 228.636250][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 228.649110][ T788] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 228.663939][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.674186][ T7265] ceph: No mds server is up or the cluster is laggy [ 228.684976][ T788] usb 2-1: Product: syz [ 228.703192][ T788] usb 2-1: Manufacturer: syz [ 228.710215][ T788] usb 2-1: SerialNumber: syz [ 228.957063][ T788] usb 2-1: 0:2 : does not exist [ 228.976019][ T788] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 229.061475][ T788] usb 2-1: USB disconnect, device number 10 [ 229.609256][ T788] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 230.354476][ T7288] loop3: detected capacity change from 0 to 16 [ 230.361577][ T7288] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 230.410531][ T7287] ALSA: mixer_oss: invalid OSS volume '' [ 231.564704][ T7298] loop2: detected capacity change from 0 to 2048 [ 231.566899][ T40] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 231.871452][ T7298] loop2: p2 p3 p7 [ 232.811590][ T5156] loop2: p2 p3 p7 [ 232.954075][ T5785] __loop_clr_fd: partition scan of loop2 failed (rc=-16) [ 232.961229][ T5795] I/O error, dev loop2, sector 608 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 232.971102][ T5934] I/O error, dev loop2, sector 208 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 232.982482][ T5978] I/O error, dev loop2, sector 408 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 232.995180][ T5978] I/O error, dev loop2, sector 408 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 233.006040][ T5978] Buffer I/O error on dev loop2p7, logical block 8, async page read [ 233.011837][ T5795] I/O error, dev loop2, sector 608 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 233.023881][ T5978] I/O error, dev loop2, sector 409 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 233.024103][ T5934] I/O error, dev loop2, sector 208 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 233.042925][ T5978] Buffer I/O error on dev loop2p7, logical block 9, async page read [ 233.072078][ T5795] Buffer I/O error on dev loop2p2, logical block 8, async page read [ 233.094719][ T5978] I/O error, dev loop2, sector 410 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 233.102640][ T5934] Buffer I/O error on dev loop2p3, logical block 8, async page read [ 233.116022][ T5795] I/O error, dev loop2, sector 609 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 233.137338][ T5934] I/O error, dev loop2, sector 209 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 233.147300][ T5978] Buffer I/O error on dev loop2p7, logical block 10, async page read [ 233.157826][ T5795] Buffer I/O error on dev loop2p2, logical block 9, async page read [ 233.168805][ T5978] Buffer I/O error on dev loop2p7, logical block 11, async page read [ 233.180132][ T5795] Buffer I/O error on dev loop2p2, logical block 10, async page read [ 233.190535][ T5934] Buffer I/O error on dev loop2p3, logical block 9, async page read [ 233.190652][ T5978] Buffer I/O error on dev loop2p7, logical block 12, async page read [ 233.280492][ T5934] udevd[5934]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 233.283527][ T7314] loop2: detected capacity change from 0 to 16 [ 233.291582][ T5978] udevd[5978]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 233.308799][ T5795] udevd[5795]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 233.341473][ T7314] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 233.980092][ T7313] ALSA: mixer_oss: invalid OSS volume '' [ 234.153539][ T7319] blktrace: Concurrent blktraces are not allowed on sg0 [ 234.630819][ T5978] udevd[5978]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 234.642943][ T5795] udevd[5795]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 234.656984][ T5934] udevd[5934]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 234.793392][ T5101] Bluetooth: hci3: unexpected event for opcode 0x6b0b [ 234.839799][ T7323] loop2: detected capacity change from 0 to 4096 [ 234.976345][ T7331] loop3: detected capacity change from 0 to 1024 [ 234.983406][ T7323] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 235.039327][ T7331] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 236.063570][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 236.101063][ T7331] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:478: comm syz.3.424: Invalid block bitmap block 0 in block_group 0 [ 236.165730][ T7331] Quota error (device loop3): write_blk: dquota write failed [ 236.206624][ T7331] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 236.242688][ T7331] EXT4-fs error (device loop3): ext4_acquire_dquot:6940: comm syz.3.424: Failed to acquire dquot type 0 [ 236.261448][ T7331] EXT4-fs error (device loop3): ext4_free_blocks:6676: comm syz.3.424: Freeing blocks not in datazone - block = 0, count = 4096 [ 236.266025][ T7343] loop1: detected capacity change from 0 to 16 [ 236.299631][ T7343] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 236.502039][ T7331] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.424: Invalid inode bitmap blk 0 in block_group 0 [ 236.591111][ T140] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-8 [ 236.616279][ T7331] EXT4-fs error (device loop3) in ext4_free_inode:363: Corrupt filesystem [ 237.053193][ T140] EXT4-fs error (device loop3): ext4_release_dquot:6976: comm kworker/u4:5: Failed to release dquot type 0 [ 237.058056][ T7331] EXT4-fs (loop3): 1 orphan inode deleted [ 237.085644][ T7341] ALSA: mixer_oss: invalid OSS volume '' [ 237.104186][ T7331] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.284143][ T140] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 237.401416][ T7353] blktrace: Concurrent blktraces are not allowed on sg0 [ 238.257886][ T5876] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 238.674973][ T5876] usb 4-1: config 0 has an invalid interface number: 156 but max is 0 [ 238.795928][ T5876] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.813787][ T5101] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 238.835335][ T5101] Bluetooth: hci3: Injecting HCI hardware error event [ 238.847005][ T5797] Bluetooth: hci3: hardware error 0x00 [ 239.101882][ T5876] usb 4-1: config 0 has no interface number 0 [ 239.108057][ T5876] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice=d6.b9 [ 239.199133][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.220691][ T5791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.232193][ T7375] loop1: detected capacity change from 0 to 16 [ 239.240827][ T7375] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 239.252096][ T5876] usb 4-1: config 0 descriptor?? [ 239.260710][ T5876] usb 4-1: can't set config #0, error -71 [ 239.358151][ T5876] usb 4-1: USB disconnect, device number 7 [ 239.844510][ T7374] ALSA: mixer_oss: invalid OSS volume '' [ 240.182082][ T7386] blktrace: Concurrent blktraces are not allowed on sg0 [ 241.159952][ T5797] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 241.199007][ T7399] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 241.228660][ T7401] binder: 7397:7401 ioctl c0306201 0 returned -14 [ 241.617535][ T7408] loop3: detected capacity change from 0 to 512 [ 241.634963][ T7408] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 241.763037][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 243.212183][ T40] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 244.207454][ T7434] binder: 7431:7434 ioctl c0306201 0 returned -14 [ 244.212124][ T7424] ALSA: mixer_oss: invalid OSS volume '' [ 244.635280][ T7445] input: syz1 as /devices/virtual/input/input21 [ 244.635542][ T5876] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 244.822079][ T5876] usb 4-1: device descriptor read/64, error -71 [ 245.112148][ T5876] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 245.228273][ T7454] loop2: detected capacity change from 0 to 2048 [ 245.271866][ T5876] usb 4-1: device descriptor read/64, error -71 [ 245.362505][ T7454] loop2: p2 p3 p7 [ 245.409565][ T5876] usb usb4-port1: attempt power cycle [ 246.163839][ T5876] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 246.190994][ T5156] loop2: p2 p3 p7 [ 246.224119][ T5876] usb 4-1: device descriptor read/8, error -71 [ 246.344447][ T5978] udevd[5978]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 246.350128][ T5795] udevd[5795]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 246.563050][ T5876] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 246.563494][ T5934] udevd[5934]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 246.606748][ T5876] usb 4-1: device descriptor read/8, error -71 [ 246.744156][ T5876] usb usb4-port1: unable to enumerate USB device [ 246.986076][ T5978] udevd[5978]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 247.001585][ T5934] udevd[5934]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 247.012690][ T5795] udevd[5795]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 247.056759][ T7465] ALSA: mixer_oss: invalid OSS volume '' [ 247.392828][ T28] audit: type=1326 audit(1758587035.648:30): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.1.470" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd0ab18eec9 code=0x0 [ 247.522389][ T2908] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 248.884205][ T2908] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 248.908201][ T7495] loop2: detected capacity change from 0 to 2048 [ 249.077064][ T7495] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.359638][ T7494] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 249.384857][ T7494] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 249.401987][ T7494] EXT4-fs (loop2): This should not happen!! Data will be lost [ 249.401987][ T7494] [ 249.418816][ T7494] EXT4-fs (loop2): Total free blocks count 0 [ 249.426051][ T7494] EXT4-fs (loop2): Free/Dirty block details [ 249.437615][ T7494] EXT4-fs (loop2): free_blocks=2415919504 [ 249.439354][ T7506] ALSA: mixer_oss: invalid OSS volume '' [ 249.450777][ T7494] EXT4-fs (loop2): dirty_blocks=48 [ 249.459378][ T7494] EXT4-fs (loop2): Block reservation details [ 249.467312][ T7494] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 249.647640][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.778916][ T7513] input: syz1 as /devices/virtual/input/input22 [ 250.121801][ T23] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 250.285126][ T23] usb 3-1: device descriptor read/64, error -71 [ 250.340456][ T7522] tipc: Started in network mode [ 250.346257][ T7522] tipc: Node identity a2d9c1aa32ba, cluster identity 4711 [ 250.353591][ T7522] tipc: Enabled bearer , priority 0 [ 250.363076][ T7522] syzkaller0: entered promiscuous mode [ 250.368595][ T7522] syzkaller0: entered allmulticast mode [ 250.396860][ T7525] netlink: 100 bytes leftover after parsing attributes in process `syz.0.482'. [ 250.412511][ T7522] tipc: Resetting bearer [ 250.438067][ T7521] tipc: Resetting bearer [ 250.477714][ T7521] tipc: Disabling bearer [ 250.796037][ T7527] loop1: detected capacity change from 0 to 40427 [ 250.813359][ T7527] F2FS-fs (loop1): invalid crc value [ 250.824139][ T7527] F2FS-fs (loop1): Found nat_bits in checkpoint [ 250.873277][ T23] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 250.887041][ T7527] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 251.162075][ T7534] ALSA: mixer_oss: invalid OSS volume '' [ 251.211817][ T23] usb 3-1: device descriptor read/64, error -71 [ 251.357657][ T7538] ------------[ cut here ]------------ [ 251.363603][ T7538] kernel BUG at fs/f2fs/segment.c:3481! [ 251.369394][ T7538] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 251.375511][ T7538] CPU: 1 PID: 7538 Comm: syz.1.485 Not tainted syzkaller #0 [ 251.382843][ T7538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 251.392930][ T7538] RIP: 0010:f2fs_allocate_data_block+0x3f08/0x3f50 [ 251.399481][ T7538] Code: 21 fe 48 8b 54 24 30 e9 c6 eb ff ff e8 91 d3 c9 fd 48 c7 c7 f0 c7 2f 8d 4c 89 f6 e8 92 ed 95 00 e9 e2 eb ff ff e8 78 d3 c9 fd <0f> 0b e8 71 d3 c9 fd 0f 0b e8 6a d3 c9 fd 0f 0b e8 63 d3 c9 fd 0f [ 251.419121][ T7538] RSP: 0018:ffffc90004267830 EFLAGS: 00010283 [ 251.425223][ T7538] RAX: ffffffff83bbc428 RBX: 0000000000000204 RCX: 0000000000080000 [ 251.433218][ T7538] RDX: ffffc9000f133000 RSI: 000000000003817e RDI: 000000000003817f [ 251.441214][ T7538] RBP: 0000000000000200 R08: ffff88805dd47c5f R09: 1ffff1100bba8f8b [ 251.449218][ T7538] R10: dffffc0000000000 R11: ffffed100bba8f8c R12: 1ffff9200084cf7c [ 251.457216][ T7538] R13: 0000000000000000 R14: 0000000000002204 R15: dffffc0000000000 [ 251.465232][ T7538] FS: 00007fd0ac0a16c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 251.474184][ T7538] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 251.480782][ T7538] CR2: 00007fd0ac0a0f98 CR3: 0000000079733000 CR4: 00000000003506e0 [ 251.488776][ T7538] Call Trace: [ 251.492072][ T7538] [ 251.495029][ T7538] ? f2fs_mark_inode_dirty_sync+0x120/0x1f0 [ 251.500949][ T7538] f2fs_map_blocks+0x1301/0x3d60 [ 251.505943][ T7538] ? f2fs_get_block_locked+0xe0/0xe0 [ 251.511281][ T7538] ? __up_read+0x280/0x670 [ 251.515715][ T7538] ? up_read+0x20/0x20 [ 251.519804][ T7538] ? f2fs_allocate_pinning_section+0x1af/0x590 [ 251.525982][ T7538] f2fs_expand_inode_data+0x5c2/0x970 [ 251.531382][ T7538] ? f2fs_insert_range+0x3d0/0x3d0 [ 251.536518][ T7538] ? __mnt_drop_write_file+0xc3/0x100 [ 251.541925][ T7538] ? file_modified_flags+0x277/0x2b0 [ 251.547259][ T7538] f2fs_fallocate+0x416/0x8a0 [ 251.551963][ T7538] vfs_fallocate+0x58e/0x700 [ 251.556565][ T7538] __x64_sys_fallocate+0xc1/0x110 [ 251.561589][ T7538] do_syscall_64+0x55/0xb0 [ 251.566011][ T7538] ? clear_bhb_loop+0x40/0x90 [ 251.570722][ T7538] ? clear_bhb_loop+0x40/0x90 [ 251.575420][ T7538] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 251.581325][ T7538] RIP: 0033:0x7fd0ab18eec9 [ 251.585773][ T7538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.605396][ T7538] RSP: 002b:00007fd0ac0a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 251.613826][ T7538] RAX: ffffffffffffffda RBX: 00007fd0ab3e6180 RCX: 00007fd0ab18eec9 [ 251.621805][ T7538] RDX: 000000000000fc01 RSI: 0000000000000000 RDI: 0000000000000007 [ 251.629785][ T7538] RBP: 00007fd0ab211f91 R08: 0000000000000000 R09: 0000000000000000 [ 251.637849][ T7538] R10: 00000000001000f4 R11: 0000000000000246 R12: 0000000000000000 [ 251.645826][ T7538] R13: 00007fd0ab3e6218 R14: 00007fd0ab3e6180 R15: 00007ffe2b90ff08 [ 251.653815][ T7538] [ 251.656863][ T7538] Modules linked in: [ 251.661861][ T7538] ---[ end trace 0000000000000000 ]--- [ 251.667360][ T7538] RIP: 0010:f2fs_allocate_data_block+0x3f08/0x3f50 [ 251.674025][ T7538] Code: 21 fe 48 8b 54 24 30 e9 c6 eb ff ff e8 91 d3 c9 fd 48 c7 c7 f0 c7 2f 8d 4c 89 f6 e8 92 ed 95 00 e9 e2 eb ff ff e8 78 d3 c9 fd <0f> 0b e8 71 d3 c9 fd 0f 0b e8 6a d3 c9 fd 0f 0b e8 63 d3 c9 fd 0f [ 251.694188][ T7538] RSP: 0018:ffffc90004267830 EFLAGS: 00010283 [ 251.700276][ T7538] RAX: ffffffff83bbc428 RBX: 0000000000000204 RCX: 0000000000080000 [ 251.708307][ T7538] RDX: ffffc9000f133000 RSI: 000000000003817e RDI: 000000000003817f [ 251.716324][ T7538] RBP: 0000000000000200 R08: ffff88805dd47c5f R09: 1ffff1100bba8f8b [ 251.724337][ T7538] R10: dffffc0000000000 R11: ffffed100bba8f8c R12: 1ffff9200084cf7c [ 251.732364][ T7538] R13: 0000000000000000 R14: 0000000000002204 R15: dffffc0000000000 [ 251.740352][ T7538] FS: 00007fd0ac0a16c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 251.749333][ T7538] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 251.755982][ T7538] CR2: 00007fd0ac0a0f98 CR3: 0000000079733000 CR4: 00000000003506e0 [ 251.764055][ T7538] Kernel panic - not syncing: Fatal exception [ 251.770488][ T7538] Kernel Offset: disabled [ 251.774856][ T7538] Rebooting in 86400 seconds..