last executing test programs: 9.313824937s ago: executing program 1 (id=1637): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = eventfd(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$FUSE_ATTR(r2, &(0x7f0000000100)={0x78, 0xfffffffffffffffe}, 0x78) write$cgroup_devices(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="01202a3a8a"], 0x8) close(r2) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) rt_sigreturn() futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) syz_emit_ethernet(0xe5, 0x0, 0x0) 9.01981962s ago: executing program 1 (id=1640): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) readv(r1, 0x0, 0x0) close(r1) rt_sigreturn() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) 4.45491808s ago: executing program 4 (id=1684): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="040ed7e54e"], 0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fchdir(0xffffffffffffffff) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000000c0)=0x3) recvmmsg(r3, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x102, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES8=r4], 0xb) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r6, @ANYBLOB="0800050002000000050053000100000043dffe227c597a63bd5ae03b5c1fc13c180291f5d7123d7eed548479d195478d154714b5c7b063758b8d02f48519ae1b40afb4ff86155a85206721c9ac710991abed6e83ede455a20b6b90b41bd70f67ee2438c038b0062f5365090252b49647cef88a76cdf9e61d4213687d77359483509232d3ca2f3cc508a1e2dffc5359ab9d0f8263870aabfb9264425ad683e811b64ae6606becf1484ee31a4bab5745229e0c8300000000000000"], 0x2c}}, 0x0) io_uring_setup(0x536d, &(0x7f0000000380)={0x0, 0x2cf6, 0x800, 0x3, 0x56}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}, @NFTA_QUEUE_FLAGS={0x6}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x4}]}}}]}]}], {0x14}}, 0x84}}, 0x0) 4.242095967s ago: executing program 0 (id=1685): syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x418484, &(0x7f0000000440), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) getdents(0xffffffffffffffff, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IMDELTIMER(0xffffffffffffffff, 0x80044941, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000001380)=""/245) 3.304033193s ago: executing program 1 (id=1688): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) 3.303753773s ago: executing program 4 (id=1689): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x81, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='net_dev_xmit\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 3.287519114s ago: executing program 4 (id=1690): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x149442, 0x0) ftruncate(r1, 0x1ffffe) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000080)={{{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x4000000000}}, {{@in=@dev}, 0x0, @in=@remote}}, 0xe8) connect$pppl2tp(r3, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) sendfile(0xffffffffffffffff, r2, 0x0, 0x80001d00c0d0) 3.191056802s ago: executing program 0 (id=1691): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x5, 0x2, 0x4}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000004850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000b00)={r2, 0x2, 0x0}, 0x10) 3.08682072s ago: executing program 2 (id=1693): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002240)=@delchain={0x304, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_u32={{0x8}, {0x54, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth0_to_team\x00'}, @TCA_U32_INDEV={0x14, 0x8, 'veth0\x00'}, @TCA_U32_HASH={0x8}, @TCA_U32_CLASSID={0x8}, @TCA_U32_MARK={0x10}, @TCA_U32_FLAGS={0x8}]}}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x260, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0x224, 0x6, [@m_connmark={0x168, 0x0, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}]}, {0x8d, 0x6, "91a991d04aa8cb411880b88050856c4a5b99aafe5cf70a535f4e162db7c30535ebf5e9ab54237bf6d2780785c80bcf9eae2d6d6d65f242d28d9992d8a093d12a497447bc2a6c4f73538dbca11ebb12d1c8ea001eac3246ebaf518402b88e3f2b51ce947977543e069be9c85124bbe592bd2ed79c20d83d312cd1c151c51eed4c8c8bce1d810f14cea5"}, {0xc}, {0xc}}}, @m_vlan={0xb8, 0x0, 0x0, 0x0, {{0x9}, {0x8c, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}, @TCA_VLAN_PARMS={0x1c}, @TCA_VLAN_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_ACT={0x30, 0x6, [@m_nat={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x304}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 3.062154912s ago: executing program 0 (id=1694): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000500050001000000080004ffe500000005000600000000000800030001000100"], 0x34}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/tcp\x00') r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000006a40)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @private0}, {0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000, 0x8e84fffef67c07}}, r4, 0xffffffff}}, 0x48) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r4, 0x632f1f9cb7442d52}}, 0x10) getdents64(r2, 0x0, 0xffb8) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000f80)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x40010) socket(0x11, 0x800000003, 0x0) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x112, &(0x7f0000000c80)={@multicast, @empty, @val={@void, {0x8100, 0x2, 0x1, 0x6}}, {@llc_tr={0x11, {@llc={0x7e, 0x80, "17dc", "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"}}}}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYRES64=r7], 0x0}, 0x90) syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x26adc0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000b80000000000007912c8000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040e44000204"], 0x47) r9 = socket(0x15, 0x2, 0x0) getsockopt(r9, 0x200000000114, 0x2713, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000ed000095b829f34de2163a8491b6061584cbb94f81eca98fd68f209500ec75e2d9dcae1f49cb35a29b17"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1f) r10 = openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r10, 0x80086303, &(0x7f0000000000)) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x0) 2.954389332s ago: executing program 2 (id=1696): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b0568000800", @ANYRES32=0x0, @ANYBLOB], 0x3}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) unshare(0x24020400) unshare(0x22000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x10) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 2.922192324s ago: executing program 0 (id=1697): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000080000000950000"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./bus\x00', 0x3000002, &(0x7f00000003c0)=ANY=[@ANYBLOB="007a82172a555a40aab70dbafd964fb9397462479d049a7f42f01c6e0b9381e3d310cb4727681c641464ab77a498e6ec737f2789b012fceb4eaee0a34ca77a718c725e863b0b028b81cd8789124fb58818d4637c74f1d91a8e331bf8b3ee5bc3c233fcbbb79ed04c26b18a5787deff22c9631497662d"], 0x2, 0x2f0, &(0x7f0000000880)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) ioctl$SNDRV_PCM_IOCTL_HWSYNC(0xffffffffffffffff, 0x4122, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bind$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100)=0x53, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 2.626531238s ago: executing program 4 (id=1699): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000410, &(0x7f0000000080)={[{@delalloc}, {@barrier}]}, 0x1, 0x79f, &(0x7f00000012c0)="$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") r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="3900000012000b4700bb65e1c3e4ffff010000003c000000560000022500000019000a001000000007fd17e5ffff080004000000000000000a", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000200)={0x20, 0x76, 0x31f, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x8, 0xa, 0x0, 0x1, [@typed={0x4, 0x0, 0x0, 0x0, @binary}]}]}, 0x20}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, &(0x7f0000000180)=0x10) r3 = eventfd(0x800a6) write$eventfd(r3, &(0x7f0000000000)=0xfffffffffffffffb, 0x8) r4 = dup(r3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}) r5 = syz_genetlink_get_family_id$smc(0x0, r4) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="10feffffffffffffff250400fdff0800010073797a30000000000900010073797a32000000000900010073797a300000000014000000000000000000001400020062776e645f73e40700"/90], 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x118823, 0x0) 2.375171638s ago: executing program 3 (id=1700): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="040ed7e54e"], 0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fchdir(0xffffffffffffffff) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000000c0)=0x3) recvmmsg(r3, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x102, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES8=r4], 0xb) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r6, @ANYBLOB="0800050002000000050053000100000043dffe227c597a63bd5ae03b5c1fc13c180291f5d7123d7eed548479d195478d154714b5c7b063758b8d02f48519ae1b40afb4ff86155a85206721c9ac710991abed6e83ede455a20b6b90b41bd70f67ee2438c038b0062f5365090252b49647cef88a76cdf9e61d4213687d77359483509232d3ca2f3cc508a1e2dffc5359ab9d0f8263870aabfb9264425ad683e811b64ae6606becf1484ee31a4bab5745229e0c8300000000000000"], 0x2c}}, 0x0) io_uring_setup(0x536d, &(0x7f0000000380)={0x0, 0x2cf6, 0x800, 0x3, 0x56}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}, @NFTA_QUEUE_FLAGS={0x6}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x4}]}}}]}]}], {0x14}}, 0x84}}, 0x0) 1.914087596s ago: executing program 0 (id=1701): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) keyctl$restrict_keyring(0x1f, 0x0, &(0x7f0000000000)='asymmetric\x00', 0x0) 1.540225816s ago: executing program 2 (id=1702): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) dup3(r1, r0, 0x0) fchdir(r0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) 1.320752214s ago: executing program 3 (id=1703): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xf}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000200), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) 1.309592384s ago: executing program 4 (id=1704): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x5, 0x2, 0x4}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000b00)={r0, 0x2, 0x0}, 0x10) 1.224040842s ago: executing program 0 (id=1705): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1817c1, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) pwritev2(r0, &(0x7f0000022e80)=[{&(0x7f0000000240)="8a8fa9a4fd711518fe0e9e4149db868356ddc80d3106a3ba4ba182e556b3c69cc44209ebc21772952577d924f8d11d62aaab7f93861471f6e33ead6ee3645d3ab16f814699cd4c867ee2297f9c56e59ee22286e6c904c002cc20ecffd7b1d93bc02da638ee85d19c1a366709f10be4e63ff4d2179581e6765e1dd48bf1efd11c6b1a8c27fa9ca79dce16359b4b1ad14c7b3c5a5c8e0fb954047a6be5fe4a5b2307b3bbefaf72c891c48f1fb5ed763ab8788c08dc8d4befc6", 0xb8}, {&(0x7f000001fc00)="23e22931d0807c51197164dcd842c7dabe17991e93279f37b8c00fd19a8980122bb233d3e14f5e77a49604cef704daf54319c0e7f05294f95df408ace220230735af87949122ae3fe34bd140eaee49c3c8d89f20863744017071571c613083649903fb43774898dab6ac6c6031a10ab6c21f4eb1dcb0d31453cceb1c55ec8b85573dffcb73c4c5270deb36c273b8868f562450a22295df31f9615b83978126e7846464a6b021d058d30cd8f30b5d31bc1e61049b07d2a6a64ff8c3d565e72e5963dce216218fbc34688020e8d761333eee66a0e637a61808829f0326c4472e5e1031aefd1d06a8091705cc376c89decdd5cdbc8c88df5c633ad53ebe4b28daa05bf691c41e6b219832d83a0323018bb059a96f2477ba22eac7ae2bc1bbc5e6b4b123b6f32e83210ab2e4841e15999ba62a118dd1b8c8351cab87eec44ec427fd932e31496244cb0bd54d9edce034d445c923fb105a7e76d73eb2c476953d3b3f786c2a316264b78e5211d03495abec0c829741880147d1e369557da9727a868b8a18f655aa461ee034beb467e5468681611c00ccc871fa382e954f9c4d381e6e84bd6e092cb13f842f6a767381a61f673060ebe8fc8ee9dd89d9af923fade01612d227a0604adc9169676a59fbddc0525135f944c1cd0e50ba7df117cb160ea22253c4db98a7285fa250eb8aa4a770aefa66174ddf408d8ed31bc5ce038d75dea587a6f74db6869552bfa7dad88190e49266db7803133e382eb4bfb06240d617a2487b8b8f92474ae56356c98fd1fb8100cbf5036f6add7e99c19ed9238f0480a4756db0d96b8324cb1e4f7f89dee4ddeb0a68eac1ef4ca899203d65ea3c22f727f355cb90d6d09049a28f9cb85d18f957118bbe59019c6f4e61e26abe16bd18bfb66a23d85fbf76796e2375ad4c70c9a54a00e7a73e407cd43d6b9787094ebc30e8b092ee76b0de8300d63a8a97fce74723ddf54171b2b0f58787d8a3050ab96b2ba462309568a089f639e1344963a23661840350335f2f5d5583bf458762179051006d0986f41b3cf14064d052a565c673f6e67178d921c0fdd3820bcb8ef5135e0dc76eb098609bab0fd02c3549943fa923aec9f35dd58e15950dc206daf3c0757dfc07bf47a6b94f9c9611967fc57d422fb332a79acaeae88a1b11bd2f0bb3aec912091774f48366f90b62025cd94e6102f59036cebefa0adc9ba8637e40d37dce8756e2887f80d323606676ec7ba19617cd86b3c0973f75634b629e11c91d0d04b9417b0c4e54d380f8035abce8294c8823eb0d7c6bfd6733723ad54903f7d793632b724915ca731a4ccb5b4e17df2bf90a11654eee9048776c78c6d674547255405af80005c2c6bb1d8390118c50acb4a5aa0278d2f5079fab5cbad5edbb2cb62e4a6f1493ed12bc6806cb09c333911dc9de03be23b18b8e8d9defc12a22357d2298b1fd088c377154292b32bf56fe460a56578d22394b3e4e7d0c4c5b66664983f8a584c73df86e90ea82592c28baba3ec915100224aa6668ac2038a219421ec75a5b063c1ad6732fc2826b2a72cbfba95396a647104834fd98d8e00260f5584fac17cb207da1e4b41c384811a6aef5d19a941bb6333f8485a03d8d8ec31c22a65fcdfea5fb953ef21c5d201195121074231ff9a610f2aca38707db615e96fc628e6f3148894de7bc501eb2350e60c15552771be23507d80588ed53760a35f789e0e1f5979120e52fc990bf2d86e031ae41f6674f66a5317a3341a8d043bbd08c056978f140187c4df8cc847a38bb145e6c8aebe8d159a94472548739ace4240c408fe2422487c5192499d6084dff2abe934b61f38f130f155933e59eeafa61779fbef71718732c7298e1ae82bdea6a9ab757d5e21cc0b8b3184c9aea7d2928c3c4be314cf4640f36bb5285fe150f288f40337cc63aed597efa51777f887f936959ecf741f21f196032e16d1fac84a3224309ec5a3612afa6bbf72c098624aafc91e23bd406d0d5961b20030bd1f3cf554ef997e98e86b04fb04c69d4c05f241a8b98137c0c09fd0fa5e4e129c2608c8d985c2d2c5265e88f20cf5e86b2dce71837dbf69bb659673f7b7468f40d21027d3da179350cf46b47ceda5add3b8a99722a4e44bb22e69d35d4f029d11cccdebc9981d47659738bb62342d07c51cc1e3fd1b69fb55ceba674a0c16c6765a5ee35718e7e738a9bf33edffb0e2b7ba33f84b7945023b94b3092a56bbf354b9f9f0c7a1890ec1eb81f882d6ecf6aaf7419b40acbebc3f4d929bf7f210fce7c9bf207c783e1e2d782f1ac257c7ca7349232c1403d3c08fdab4282aa2d10cd7ecf89e9c1e70f308c316e976d7e3dd386f6079cc8c8d02953a4a29929142454c340627412a1e45f7f6c3982b653c21c4defba2ab05436b2bf01b573d11c77db9fbb0878b131df24c5400695e886e6421f1bb038a4647dabce361904c868e00535a7ae81ad529229da3ade087d08032c112fc8614b3c4775ca4ae788a5efecf0ef4bfebd9223f454adcf8a243daf518868192e6c2ccbc95ec3412fdcd4d677dedc132171b6ec98d5bc35f02e62f337769c5d2fcf1767250f9370cabccf9f28940cac51817a1ee3b7c8eac564d44d3b03f11b2ba476f20ad0059b051755b1e80725c3d2853ef5b4bc1c9e1e9b14065abcb2a0a73396a9c505699d9b1646fc85caa75e51c60ca230cb1c0dc09cb58fcbfbc8df4629a7b8ff27a4b8a307781b01fabef091bff49daaedea0b58bae5c4ffa27eec04273244edd8c38ea3f4d43c52d72b767ffb5e2d1b719f1980b0c4499bff5b32256264a873d244dea1397655a592c6c33df44191beb3bd7dddd4fbf4716729dfa34063e82798fab0d0fa288014d51fe185165be225d5fb7b9a98d50ec3ac4f14668a55a5a0015eabdf30081ed914e8f4a6c7c959f71bc3abd04fac335c29bbc42c584cad874e2e24746ca3cbe744989fdb6d71919c3204ffb79996297c641fa51f7cd0beda069d651f9954fd1f58cfcfd7c5264b68634391512959262d3ad34403a33bdeab10a8c213be5c806ec061a1d619c1151c50a05ddb7a115428006de7e3085a5cc5e9164c9f660875c4169a67ecc14138a51ee0c341d0754785b16ed8a49b8adf609fc613cbd7dcf5927b3d71f3cbaa1326c55bb53ac87050e4866a5e37bf389a35191de29b2addd51719cfe41ce64a73d9ff03b3750eb7b4292c88ce5f05bc12bb1158601607e9204935a88c54b5e14848a6053332874deb9c61c4da0b366b9295e5d7b1ee6bb44cea6367588c17bc35ca65416440c7b6ee60f92f992c4a2b4704c552ddb099b78c3891d06945d9abdfd762890d2df275a7f7f974610026a9b806677cec885d8883196bb01e63b19fc51387d5288a5d49a6858771fe3c0490efa92ca4736d26ffd004094df4b5ba8fd4b4674599f175b193f70a1e9171ee81e625b0c06b19aa1a3ae934adbf695d263d138ed4dbb074b34479b632c60c62b44b08aab9e6da97815e4fab75415de3913e9c7d3de4aedfde36b2451ce4a4897570199063f6cb81c5f61b8be5bb24436169665126de7f51b9a9d0dff9160dc39e4a9b7db8a7baee2ab9aee81c198d54a366ffa51db01bfccbe8c2c721acb386facf210c35a82807c3a0c2c8d843d56a63860335fe5761b3b4504c45958dbbf1bf2f080e44e39db71c5c8127bc6d8d6edceafbc24230b2ac8d29f4617174a9a9c2d277d1125a075672897c17dafa775c09cf8e02e216845e6b4b2f697f16a8b9573fc67133b558927b23ba6e7b18c5065d870b6cd775c319595bf9c0cd7a4d02671723e38cba06944099d88faaf9fee27f1e1829af7804b0d4969e08dacc3b391c0043b1f4f4750572d39c49850a8b33ad1caf4c3c0b0f33bdaf9822ef78e499c23c4f453f50a30b604cf714e7f2fd659f91c1b9ee3e71ddd5eef78872c8c37ea027537c9ec64487c67ec06b47e5d74ffc44687c40fa783036b06a1dc0c1b517340306c5b8e888f7f25e63ff3914785e9a21957cc170719958a8262d260f030e0599a021179a823f89cb6a1b2ab1730565982f0cc1b9f2556b46880af51c73498097fb532259379bccd65e9cedc52a8bf20a797c0545e155410feb40f1e530e3ef9eb466b4d18238ab55af97c20c2d65ee21a408d6737c0f81dc1cea08a863f04d624d5e4a870f7aa691ecca291353f8e13e79acf1b9ac7b3c38924df0ab20a89b8685951538d58c33ee014e263d7ddbff308819d97e51bfabf85b0e47c20e1b23574954c0a9310e04c2b9e617a532746d77a494df31c6549f575615a558e07f4cc442812407e98b17bf22a448db25eabcb3b627584f3af8cb4034f23154488b9a05ef22621b91fa8e855cdf5e1da54656d08044aa67c8662ea4a47fe4dd9eedcfb3b1f8738df1378f73330be94b5365776bebc6ff97eb3be959ab63323775124f0016e8b37ca81d0e1a2ea424827016b07f3c19043d5603848e9e7f49a14c245b1316ae252d4ca5f504d8c384c74f936af3d3b2bd16853789f79b45247dfdec94f730e8ec732a996b0303d95796163fda48248f8efc349ca49bf35e3ed3bd15cb59108c07f9101f05b84f6d47680729772a8968ac999640d863578165cff7d41ac5a1bcce3211cde36666d6260cc86ca32ec420ca83c38b69fe82876065a89a8b905a304fe5c607ee77e6010fa33b609d65edf2fa29b7bd21b6c7fd70841542ebff65aa1cce54accb6889bafdbc87f6a849512b2d714f4ea926a84b5743b66882a516c0954d7228b225b98b72e2433d7f906d9f37e46ac72586fca6d4acc9f38ccae8898c431eb2baa9c5f24909867156b87d57e22bacdecd7937ee66d999a41ab745f4018d354961e88dd794c100e745f090d81e97c6a54e1c31ffd388d5542c0a14eb4d3f560e03f313c5f798836285c403f2a2dec996dff40df8f5cae096d6d69c47e9c59800730237e124685eaf2044d615d1e94e512ff0f94152774cf6c82b903e3a2fd2419687fa198e9234e5f6bfce772f4b4192a9ff506f7f8afd15cef08c0ea8d9fe691d56c8ab9ab35d89d9043d4beafc61023f81c4d7ac2f4bd7e722fb032acfb6ebac2305ee3aed5f147274193f296e8effa42676d17c0bd8aa4df19e12d55f7f5310620cc0f18ab724df2639f6f25ba2117f093b5ee353618f01c11292a720708286472a4582fa9786a743f241d8c63be9f3ef9cf7469194217646dadf7274253a642958960b0b20ef759afbef5bcaf363ee056871b532aecf9af7e803660fce551981281a4a27ed4dc017d11382397b3f68ae5745fd6cabd3639bacb66e4bfbd7b00e99327a65e0901512efa1853fc81d8e12828083708db9c337f2fb431e8f445607b37e09a20ab7e99cde4e54c0665c3932cd1f978b7fc8dc26a8baeb5ae5ad95acd9a80595c9d85ef3801a0bdc75a20410b5077f58c928e3e9914444fa1b66ba8fee0b40b359c201708ba89dc1108e4e03a56abd31c279da1330e8713a3b71650bfd9ddd44787bd91112689598eae95293e96d25992442b4395789", 0xf48}], 0x2, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) 1.223901222s ago: executing program 2 (id=1706): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000013c0)=ANY=[@ANYBLOB='iocharset=macgreek,umask=00000000000000000000005,namecase=1,uid=', @ANYRESHEX=0x0, @ANYBLOB=',fmask=00000000000000000000010,discard,fmask=000000000\x000000000000006,iocharset=maccenteuro,errors=continue,allow_utime=00000000147070,\x00'/144], 0x1, 0x1528, &(0x7f00000037c0)="$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") mkdir(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 1.192772194s ago: executing program 3 (id=1707): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000500050001000000080004ffe500000005000600000000000800030001000100"], 0x34}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/tcp\x00') r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000006a40)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @private0}, {0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000, 0x8e84fffef67c07}}, r4, 0xffffffff}}, 0x48) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r4, 0x632f1f9cb7442d52}}, 0x10) getdents64(r2, 0x0, 0xffb8) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000f80)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x40010) socket(0x11, 0x800000003, 0x0) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x112, &(0x7f0000000c80)={@multicast, @empty, @val={@void, {0x8100, 0x2, 0x1, 0x6}}, {@llc_tr={0x11, {@llc={0x7e, 0x80, "17dc", "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"}}}}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYRES64=r7], 0x0}, 0x90) syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x26adc0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000b80000000000007912c8000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040e44000204"], 0x47) r9 = socket(0x15, 0x2, 0x0) getsockopt(r9, 0x200000000114, 0x2713, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000ed000095b829f34de2163a8491b6061584cbb94f81eca98fd68f209500ec75e2d9dcae1f49cb35a29b17"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1f) r10 = openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r10, 0x80086303, &(0x7f0000000000)) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x0) 1.11721841s ago: executing program 1 (id=1708): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1e, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x4, 0x0, 0x0, 0x9}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private}, {@dev={0xac, 0x14, 0x14, 0x34}}, {@multicast2}, {@dev, 0x658}, {@broadcast}, {@remote}, {@private=0xa010101}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0xf, 0x0, [@remote, @multicast1, @private=0xa010102]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.056134275s ago: executing program 4 (id=1709): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x149442, 0x0) ftruncate(r1, 0x1ffffe) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000080)={{{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x4000000000}}, {{@in=@dev}, 0x0, @in=@remote}}, 0xe8) connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) sendfile(r2, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) 1.055886145s ago: executing program 3 (id=1710): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000000c0)={0x0, 0x8}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) close_range(r1, 0xffffffffffffffff, 0x0) openat2(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x0, 0x144}, 0x18) 1.021996718s ago: executing program 2 (id=1711): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000080000000950000"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./bus\x00', 0x3000002, &(0x7f00000003c0)=ANY=[@ANYBLOB="007a82172a555a40aab70dbafd964fb9397462479d049a7f42f01c6e0b9381e3d310cb4727681c641464ab77a498e6ec737f2789b012fceb4eaee0a34ca77a718c725e863b0b028b81cd8789124fb58818d4637c74f1d91a8e331bf8b3ee5bc3c233fcbbb79ed04c26b18a5787deff22c9631497662d"], 0x2, 0x2f0, &(0x7f0000000880)="$eJzs3btuE00YxvFn1nbsHJRvc/iERAMKRIImCgchROMIuaWnQkDsSBFWEEmQgAaDKBEXQM8twD3QgLgBqKi4gHSLZjw+7zqOY3uT8P9JscazM7vvsLueeVfCFoB/1t3Sz083fts/I2WUkXRHCiQVpKyk/3Wu8Hxnf3u/Win321HG9bB/RvWepqfN5k4lrqvt53p4oX2X1Vx7HcYjiqKNXwO3vjXWWJAed/fHCKS8vw/d9sKE4xqXmnQh7Rgmrf0EmwMd6IXmUwwHAHAC+Pk/8NPEnKsyCmrSqp/2z9T8f5B2AKN1s9pTFfXt0Db/u9VdZOz5/c9tauV7LoWz24NGljhIMLmu91OqX1kdC0xzWFbpYgmmt7azWtt8o3Kgtyp6bc2W3Wu5fuk2dEVb7Nr1Skxu2kfy2HO6N1MfjVtRdmuEtLVdreRdIL3xLx3tiMdnvprv5oEJ9VHl5vovGxl7mtyZCrvOVJCz8a8n73HW9bKt5NP+YrEYdDRZcAc574/gHTLKQnxGosYVtdB6aFBrRlCP80tyr0V1Plaoj+5a8uhcr6W4XmHzXUKv5Y5eGX8lrG0+rfZ9lDJe5oO5b1b0R59Valv/Bza+VQ1yZ9o2rqW/MurjmYpvmXUtw56Zo3W7XGxG4OWHGxiO4r0e67bm916+epKpViu7tvAopvBsbtf4mtw7KbbNEIX8iPZjC6q1aiLrdRQN2j0aXRi9hasj3aH9/GjW2NsnrrG9y5o1wdEOMT+Wf4RhCwWdiDBiC6Vv0gkI4/iFKJISNqX9AYVJ2DONk+4rplMOCJNm110mMnbmmG1kJtXKukuR7EvYZ53eP8ls5AZ+jd3M4DqXgovudSY+g9tI2m1iBtd2xOsJOaPLuS5dkS63VRr1zUZCH+cZYUr6oYc8/wcAAAAAAAAAAAAAAAAAADhtJvE/DdIeIwAAAAAAAAAAAAAAAAAAAAAAp91Qv/8b9x3x7vd/wxH+/i9fRA+M298AAAD//wZEecs=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) ioctl$SNDRV_PCM_IOCTL_HWSYNC(0xffffffffffffffff, 0x4122, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bind$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100)=0x53, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 594.641452ms ago: executing program 1 (id=1712): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000b00)) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x1a5982) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) r2 = syz_io_uring_setup(0x6908, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1864, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000280)={0x1, r6}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r7}, 0x38) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r10 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x688200) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000740)={0x53, 0x0, 0x6, 0x0, @scatter={0xfdbc, 0x0, 0x0}, &(0x7f0000000000)="a1f8a81b133d", 0x0, 0x0, 0x10012, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="bf160100730000000000000010000000100000000300"], &(0x7f0000000200)=""/31, 0x2b, 0x1f, 0x0, 0x11e}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x3, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x1, '\x00', 0x0, 0x0, r11, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000100)={0x0, 0x6}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r9, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r12, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) 392.344898ms ago: executing program 3 (id=1713): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[]) 110.542261ms ago: executing program 3 (id=1714): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="040ed7e54e"], 0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fchdir(0xffffffffffffffff) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000000c0)=0x3) recvmmsg(r3, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x102, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES8=r4], 0xb) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r6, @ANYBLOB="0800050002000000050053000100000043dffe227c597a63bd5ae03b5c1fc13c180291f5d7123d7eed548479d195478d154714b5c7b063758b8d02f48519ae1b40afb4ff86155a85206721c9ac710991abed6e83ede455a20b6b90b41bd70f67ee2438c038b0062f5365090252b49647cef88a76cdf9e61d4213687d77359483509232d3ca2f3cc508a1e2dffc5359ab9d0f8263870aabfb9264425ad683e811b64ae6606becf1484ee31a4bab5745229e0c8300000000000000"], 0x2c}}, 0x0) io_uring_setup(0x536d, &(0x7f0000000380)={0x0, 0x2cf6, 0x800, 0x3, 0x56}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}, @NFTA_QUEUE_FLAGS={0x6}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x4}]}}}]}]}], {0x14}}, 0x84}}, 0x0) 70.506274ms ago: executing program 2 (id=1715): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) keyctl$restrict_keyring(0x1f, 0x0, &(0x7f0000000000)='asymmetric\x00', 0x0) 0s ago: executing program 1 (id=1716): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x800, &(0x7f0000000000)={[{@volume={'volume', 0x3d, 0x3e}}, {@gid}, {@uid_forget}, {@gid_forget}, {@volume={'volume', 0x3d, 0x3ff}}, {@utf8}, {}, {@lastblock={'lastblock', 0x3d, 0x2}}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}]}, 0x1, 0xc32, &(0x7f000001fd40)="$eJzs3U1sXNd9N+D/uRyKI/l9KyZ2FCeNi0lbpLJiufqKqViFO6pptgFkWQjF7AJwJI7UgSmSIKlGNtKC6aaLLgIURRdZEWiNAikaGE0RdMm0LpBsvCiy6opoYSMoumCLAFkFLO6dM9KQIm1GFCVKeh6b+s3ce86dc+4Z3ysLOvcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDxe6+dP3EyPexWAAAP0sXxr5445f4PAE+Uy/7/HwAAAAAAAAAAAAAA9rsURTwdKeYurqXJ6n1X/UJn8OatidGxrasdTFXNgap8+VM/eer0mS+9NHK2lxc6Mx9R/377bLwxfvl849XZG3Pz7YWF9lRjYqZzdXaqveMj7Lb+ZseqE9C48ebNqWvXFhqnXjy9Yfet4Q+HnjoyfG7k+ePP9cpOjI6Njd8pUu8vX7vnhnRtN8PjQBRxPFK88L2fplZEFLH7c1F/sGO/2cGqE8eqTkyMjlUdme60ZhbLnZd6J6KIaPRVavbO0dZjEbXBB9qH7TUjlsrmlw0+VnZvfK4137oy3W5cas0vdhY7szOXUre1ZX8aUcTZFLEcEatDdx9uMIqoRYrvHF5LVyJioHcevlhNDN6+HcUe9nEHynY2BiOWi0dgzPaxoSji9Ujxs/eOxtV8namuNV+IeL3MH0S8U+YrEan8YpyJ+GCL7xGPploU8efl+J9bS1PV9aB3XbnwtcZXZq7N9pXtXVd+yfvDXVeKh3R/OLgpH4x9fm2qRxGt6oq/lu79NzsAAAAAAAAAAAAAAAAA3G8Ho4jPRIrX/u2PqnnFUc1LP3xu5PeH/3//nPFnP+Y4ZdkXI2Kp2Nmc3AN5YuCldCmlhzyX+ElWjyL+OM//+9bDbgwAAAAAAAAAAAAAAAAAAMATrYifRIqX3z+alqN/TfHOzPXG5daV6e6qsL21f3trpq+vr683UjebOSdzLuVczrmSczVnFLl+zmbOyZxLOZdzruRczRkDuX7OZs7JnEs5l3Ou5FzNGbVcP2cz52TOpZzLOVdyruaMfbJ2LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA46SIIn4RKb79jbUUKSKaEZPRzZWhh906AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA0lIr4fqRo/EHz9rZaRKTq366j5S9nonmgzE9Gc6TMV6J5PmerylrzWw+h/ezOYCrix5FiqP7u7QHP4z/YfXf7axDvfPPOu8/WujnQ2zn84dBTRw6fGxn7tWe3e522asCxC52Zm7caE6NjY+N9m2v50z/Zt204f25xf7pORCy89fabrenp9vy9vyi/Aruo/gi9SLUnpadeVC+iti+a8XD6zhOgvP9/ECl++/1/793wu/f/evy/7rvbd/j4+Z/cuf+/vPlAO7z/1zbXy/f/8p6+1f3/6b5tL+ffjQzWIuqLN+YGj0TUF956+3jnRut6+3p75syJE18eGfny6RODByLq1zrT7b5X9+V0AQAAAAAAAAAAAAAAADw4qYjfjRStH6+lRkTcquZrDZ8bef74cwMxUM232jBv+43xy+cbr87emJtvLyy0pxoTM52rs1PtnX5cvZruNTE6tied+VgH97j9B+uvzs69Nd+5/oeLW+4/VD9/ZWFxvnV1691xMIqIZv+WY1WDJ0bHqkZPd1ozVdVLW06m/+UNpiL+I1JcPdNIn8/b8vz/zTP8N8z/X9p8oD2a//+Jvm3lZ6ZUxM8jxW/9xbPx+aqdh+Kuc5bL/U2kOHb2c7lcHCjL9drQfa5Ad2ZgWfZ/IsU//GJj2d58yKfvlD254xP7iCjH/3Ck+P6ffTd+PW/b+PyHrcf/0OYD7dH4P9O37dCG5xXsuuvk8T8eKV55+t34jbzto57/0Xv2xtFc+PbzOfZo/D/Vt204f+5v3p+uAwAAAAAAAAAAPNIGUxF/Gyl+OFZLL+VtO/n7f1ObD7RHf//r033bpu7PekUf+2LXJxUAAAAA9onBVMRPIsX1xXdvz6HeOP+7b/7n79yZ/zmaNu2t/pzvV6rnBtzPP//rN5w/d3L33QYAAAAAAAAAAAAAAAAAAIB9JaUiXsrrqU9W8/mntl1PfSVSvPZfL+Ry6UhZrrcO/HD1a/3i7Mzx89PTs1dbi60r0+3G+Fzrarus+0ykWPvrz+W6RbW+em+9+e4a73fWYp+PFGN/1yvbXYu9tzb5M72yS+2TZdlPRIr//PuNZXvrWH/qznFPlWX/KlJ8/Z+2LnvkTtnTZdnvRooffb3RK3uoLNt7Puqn75R98epssQejAgAAAAAAAAAAAAAAAAAAwJNmMBXxp5Hiv28s357Ln9f/H+x7W3nnm33r/W9yq1rnf7ha/3+71/ey/n/1XIGl7T4VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTymKeDtSzF1cSytD5fuu+oXOzM1bE6NjW1c7mKqaA1X58qd+8tTpM196aeRsLz+6/v32mXhj/PL5xquzN+bm2wsL7anGxEzn6uxUe8dH2G39zY5VJ6Bx482bU9euLTROvXh6w+5bwx8OPXVk+NzI88ef65WdGB0bG+8rUxu850+/S9pm+4Eo4i8jxQvf+2n64VBEEbs/Fx/z3dlrB6tOHKs6MTE6VnVkutOaWSx3XuqdiCKi0Vep2TtHD2AsdqUZsVQ2v2zwsbJ743Ot+daV6XbjUmt+sbPYmZ25lLqtLfvTiCLOpojliFgduvtwg1HEm5HiO4fX0j8PRQz0zsMXL45/9cSp7dtR7GEfd6BsZ2MwYrn4qDHbosNsMBRF/GOk+Nl7R+NfhiJq0f2JL0S8XuYPIt6J7nin8otxJuIDp/WxUYsi/rcc/3Nr6b2h8nrQu65c+FrjKzPXZvvK9q4rj/z94UHa5/eTehTxo+qKv5b+1X/XAAAAAAAAAAAAAAAAAPtIEb8aKV5+/2iq5gffnlPcmbneuNy6Mt2d1teb+9ebM72+vr7eSN1s5pzMuZRzOedKztWcUeT6OZtl1tfXJ/P7pZzLOVdyruaMgVw/ZzPnZM6lnMs5V3Ku5oxarp+zmXMy51LO5ZwrOVdzxj6ZuwcAAAAAAAAAAAAAAAAAADxeiuqfFN/+xlpaH6rWlx7o7VuxHuhj7/8CAAD//0pa+Ck=") creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) fsync(r0) kernel console output (not intermixed with test programs): o=0 [ 219.464332][ T6877] EXT4-fs (loop4): unmounting filesystem. [ 219.525568][ T7262] loop4: detected capacity change from 0 to 512 [ 219.548718][ T7262] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 219.572403][ T5084] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 219.590184][ T7262] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1106: inode #1: comm syz.4.1106: iget: illegal inode # [ 219.610920][ T7262] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1106: error while reading EA inode 1 err=-117 [ 219.624243][ T7262] EXT4-fs (loop4): 1 orphan inode deleted [ 219.630354][ T7262] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 219.662119][ T6877] EXT4-fs (loop4): unmounting filesystem. [ 219.839327][ T5084] usb 1-1: Using ep0 maxpacket: 32 [ 219.869378][ T3603] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 219.956752][ T7278] loop4: detected capacity change from 0 to 32768 [ 219.968215][ T7278] XFS (loop4): Mounting V5 Filesystem [ 219.979519][ T5084] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 220.007286][ T7278] XFS (loop4): Ending clean mount [ 220.014355][ T7278] XFS (loop4): Quotacheck needed: Please wait. [ 220.038436][ T7278] XFS (loop4): Quotacheck: Done. [ 220.062858][ T6877] XFS (loop4): Unmounting Filesystem [ 220.159409][ T5084] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 220.179680][ T5084] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.199447][ T5084] usb 1-1: Product: syz [ 220.204220][ T5084] usb 1-1: Manufacturer: syz [ 220.208836][ T5084] usb 1-1: SerialNumber: syz [ 220.243836][ T3603] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.298197][ T3564] Bluetooth: hci2: unexpected cc 0x0402 length: 65 > 1 [ 220.455116][ T3603] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 220.468264][ T3603] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.485729][ T7301] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1116'. [ 220.489247][ T3603] usb 3-1: Product: syz [ 220.509350][ T3603] usb 3-1: Manufacturer: syz [ 220.522530][ T7301] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.523715][ T3603] usb 3-1: SerialNumber: syz [ 220.531774][ T7301] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.545163][ T7301] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.548431][ T7303] loop4: detected capacity change from 0 to 512 [ 220.553891][ T7301] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.562994][ T7301] device vxlan0 entered promiscuous mode [ 220.577610][ T3603] usb 3-1: config 0 descriptor?? [ 220.603528][ T7303] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.1117: casefold flag without casefold feature [ 220.625763][ T7303] EXT4-fs error (device loop4): __ext4_iget:5044: inode #12: block 2: comm syz.4.1117: invalid block [ 220.641540][ T7303] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1117: error while reading EA inode 12 err=-117 [ 220.656200][ T7303] EXT4-fs (loop4): 1 orphan inode deleted [ 220.664103][ T7303] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 220.678307][ T27] audit: type=1800 audit(1721115652.354:50): pid=7303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1117" name="bus" dev="loop4" ino=15 res=0 errno=0 [ 220.715783][ T6877] EXT4-fs (loop4): unmounting filesystem. [ 220.777143][ T7317] loop4: detected capacity change from 0 to 512 [ 220.787960][ T7317] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 220.808740][ T7317] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1120: inode #1: comm syz.4.1120: iget: illegal inode # [ 220.828751][ T7317] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1120: error while reading EA inode 1 err=-117 [ 220.846206][ T7317] EXT4-fs (loop4): 1 orphan inode deleted [ 220.853284][ T7317] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 220.867735][ T3603] snd-usb-audio: probe of 3-1:0.0 failed with error -2 [ 220.876640][ T3603] usb 3-1: USB disconnect, device number 11 [ 220.893812][ T6877] EXT4-fs (loop4): unmounting filesystem. [ 220.905281][ T7324] netlink: 'syz.1.1123': attribute type 10 has an invalid length. [ 221.435282][ T7341] loop2: detected capacity change from 0 to 512 [ 221.446673][ T7341] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.1130: casefold flag without casefold feature [ 221.460536][ T7341] EXT4-fs error (device loop2): __ext4_iget:5044: inode #12: block 2: comm syz.2.1130: invalid block [ 221.514678][ T7343] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1129'. [ 221.686629][ T7341] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.1130: error while reading EA inode 12 err=-117 [ 221.726204][ T7341] EXT4-fs (loop2): 1 orphan inode deleted [ 221.750919][ T7341] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 222.065449][ T3559] EXT4-fs (loop2): unmounting filesystem. [ 222.297470][ T6730] usb 1-1: USB disconnect, device number 14 [ 222.315476][ T7351] netlink: 'syz.4.1133': attribute type 29 has an invalid length. [ 222.337610][ T7351] netlink: 'syz.4.1133': attribute type 29 has an invalid length. [ 222.349735][ T7350] loop1: detected capacity change from 0 to 512 [ 222.364300][ T7357] netlink: 'syz.4.1133': attribute type 29 has an invalid length. [ 222.383709][ T7350] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 222.398633][ T7351] netlink: 'syz.4.1133': attribute type 29 has an invalid length. [ 222.414591][ T7351] netlink: 'syz.4.1133': attribute type 29 has an invalid length. [ 222.427740][ T7350] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.1134: inode #1: comm syz.1.1134: iget: illegal inode # [ 222.490836][ T7350] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.1134: error while reading EA inode 1 err=-117 [ 222.563933][ T7350] EXT4-fs (loop1): 1 orphan inode deleted [ 222.594693][ T7350] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 222.643590][ T7374] loop0: detected capacity change from 0 to 512 [ 222.664935][ T7374] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz.0.1141: casefold flag without casefold feature [ 222.690305][ T3548] EXT4-fs (loop1): unmounting filesystem. [ 222.696349][ T7377] smc: net device wg0 applied user defined pnetid SYZ0 [ 222.696458][ T7374] EXT4-fs error (device loop0): __ext4_iget:5044: inode #12: block 2: comm syz.0.1141: invalid block [ 222.721222][ T7377] smc: net device wg0 erased user defined pnetid SYZ0 [ 222.729322][ T7374] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.1141: error while reading EA inode 12 err=-117 [ 222.747955][ T7374] EXT4-fs (loop0): 1 orphan inode deleted [ 222.754014][ T7374] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 222.789974][ T3557] EXT4-fs (loop0): unmounting filesystem. [ 223.015301][ T3603] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 223.038331][ T7403] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1156'. [ 223.065385][ T7405] loop0: detected capacity change from 0 to 512 [ 223.085732][ T7405] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz.0.1157: casefold flag without casefold feature [ 223.105210][ T7405] EXT4-fs error (device loop0): __ext4_iget:5044: inode #12: block 2: comm syz.0.1157: invalid block [ 223.139537][ T7405] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.1157: error while reading EA inode 12 err=-117 [ 223.160385][ T7405] EXT4-fs (loop0): 1 orphan inode deleted [ 223.166222][ T7405] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 223.210571][ T3557] EXT4-fs (loop0): unmounting filesystem. [ 223.259177][ T7413] smc: net device wg0 applied user defined pnetid SYZ0 [ 223.268233][ T7413] smc: net device wg0 erased user defined pnetid SYZ0 [ 223.279349][ T3603] usb 2-1: Using ep0 maxpacket: 32 [ 223.429570][ T3603] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 223.619578][ T3603] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 223.637664][ T3603] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.655029][ T3603] usb 2-1: Product: syz [ 223.675348][ T3603] usb 2-1: Manufacturer: syz [ 223.686893][ T3603] usb 2-1: SerialNumber: syz [ 223.795096][ T7435] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 223.957449][ T7442] loop4: detected capacity change from 0 to 512 [ 223.978651][ T7442] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.1171: casefold flag without casefold feature [ 223.998284][ T7442] EXT4-fs error (device loop4): __ext4_iget:5044: inode #12: block 2: comm syz.4.1171: invalid block [ 224.013516][ T7442] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1171: error while reading EA inode 12 err=-117 [ 224.042996][ T7442] EXT4-fs (loop4): 1 orphan inode deleted [ 224.075791][ T7442] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 224.252597][ T6877] EXT4-fs (loop4): unmounting filesystem. [ 224.330054][ T3564] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 224.339259][ T3564] Bluetooth: hci2: Injecting HCI hardware error event [ 224.347072][ T3550] Bluetooth: hci2: hardware error 0x00 [ 225.409998][ T5088] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 225.766076][ T3603] usb 2-1: USB disconnect, device number 14 [ 225.789361][ T5088] usb 3-1: config 0 has an invalid interface number: 127 but max is 1 [ 225.797604][ T5088] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.855601][ T5088] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 225.865154][ T5088] usb 3-1: config 0 has no interface number 0 [ 225.871621][ T5088] usb 3-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 226.254873][ T7494] loop1: detected capacity change from 0 to 2048 [ 226.269623][ T5088] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 226.334634][ T7494] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 226.601014][ T3550] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 226.636732][ T5088] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.842495][ T7493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1190'. [ 226.859715][ T5088] usb 3-1: Product: syz [ 226.865257][ T5088] usb 3-1: Manufacturer: syz [ 226.870918][ T5088] usb 3-1: SerialNumber: syz [ 226.884035][ T5088] usb 3-1: config 0 descriptor?? [ 226.948455][ T5088] usb-storage 3-1:0.127: USB Mass Storage device detected [ 226.975657][ T5088] usb-storage 3-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 227.147349][ T3603] usb 3-1: USB disconnect, device number 12 [ 227.453476][ T7526] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1200'. [ 227.769367][ T3594] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 228.019358][ T3594] usb 1-1: Using ep0 maxpacket: 8 [ 228.091062][ T7540] netlink: 'syz.4.1205': attribute type 1 has an invalid length. [ 228.128731][ T7540] device bond1 entered promiscuous mode [ 228.149461][ T3594] usb 1-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 228.155932][ T7540] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 228.169435][ T3594] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 228.188848][ T3594] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.240085][ T3594] hub 1-1:32.0: bad descriptor, ignoring hub [ 228.246147][ T3594] hub: probe of 1-1:32.0 failed with error -5 [ 228.251765][ T7540] bond1: (slave bridge1): making interface the new active one [ 228.285105][ T7540] device bridge1 entered promiscuous mode [ 228.325557][ T7540] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 228.579490][ T3592] usb 1-1: USB disconnect, device number 15 [ 228.639362][ T3594] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 228.725044][ T7573] loop4: detected capacity change from 0 to 128 [ 228.731800][ T7573] ext4: Unknown parameter 'smackfshat' [ 228.959446][ T3592] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 228.999471][ T3594] usb 4-1: config 0 has an invalid interface number: 127 but max is 1 [ 229.007691][ T3594] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.019858][ T3594] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 229.029091][ T3594] usb 4-1: config 0 has no interface number 0 [ 229.035541][ T3594] usb 4-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 229.180032][ T7583] loop4: detected capacity change from 0 to 512 [ 229.195878][ T7583] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 229.209374][ T3592] usb 2-1: Using ep0 maxpacket: 16 [ 229.219611][ T3594] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 229.229598][ T3594] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.238069][ T3594] usb 4-1: Product: syz [ 229.244103][ T3594] usb 4-1: Manufacturer: syz [ 229.248803][ T3594] usb 4-1: SerialNumber: syz [ 229.255680][ T3594] usb 4-1: config 0 descriptor?? [ 229.278625][ T7583] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 229.294191][ T7583] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038 (0x7fffffff) [ 229.310386][ T3594] usb-storage 4-1:0.127: USB Mass Storage device detected [ 229.321863][ T3594] usb-storage 4-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 229.489542][ T3592] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 229.503435][ T3592] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.528760][ T3592] usb 2-1: Product: syz [ 229.537006][ T3592] usb 2-1: Manufacturer: syz [ 229.543449][ T3592] usb 2-1: SerialNumber: syz [ 229.553643][ T3592] usb 2-1: config 0 descriptor?? [ 229.557913][ T7604] loop0: detected capacity change from 0 to 512 [ 229.564133][ T5466] usb 4-1: USB disconnect, device number 12 [ 229.584199][ T7606] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1229'. [ 229.599321][ T7604] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 229.600619][ T3592] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 229.625282][ T3592] usb 2-1: Detected FT232H [ 229.649493][ T7604] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.1228: inode #1: comm syz.0.1228: iget: illegal inode # [ 229.665365][ T7604] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.1228: error while reading EA inode 1 err=-117 [ 229.678878][ T7604] EXT4-fs (loop0): 1 orphan inode deleted [ 229.684841][ T7604] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 229.713039][ T3557] EXT4-fs (loop0): unmounting filesystem. [ 229.803593][ T7570] loop1: detected capacity change from 0 to 128 [ 229.825152][ T7570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1216'. [ 229.849574][ T3592] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 229.858142][ T7612] netlink: 'syz.0.1231': attribute type 10 has an invalid length. [ 229.869438][ T3594] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 229.877138][ T3592] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 229.904633][ T7612] bond0: (slave netdevsim0): Releasing backup interface [ 229.911840][ T3592] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 229.919519][ T3592] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 229.929915][ T3592] usb 2-1: USB disconnect, device number 15 [ 229.948244][ T3592] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 229.957973][ T3592] ftdi_sio 2-1:0.0: device disconnected [ 229.989012][ T7612] team0: Port device netdevsim0 added [ 229.997713][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 230.088983][ T7615] loop3: detected capacity change from 0 to 128 [ 230.107336][ T7615] ext4: Unknown parameter 'smackfshat' [ 230.119454][ T3594] usb 3-1: Using ep0 maxpacket: 8 [ 230.239596][ T3594] usb 3-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 230.256069][ T3594] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 230.265401][ T3594] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.320261][ T3594] hub 3-1:32.0: bad descriptor, ignoring hub [ 230.331966][ T3594] hub: probe of 3-1:32.0 failed with error -5 [ 230.555373][ T7622] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 230.650598][ T3603] usb 3-1: USB disconnect, device number 13 [ 230.732706][ T7624] loop0: detected capacity change from 0 to 64 [ 230.768703][ T7624] hfs: get root inode failed [ 230.929940][ T5084] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 231.229473][ T5084] usb 4-1: too many configurations: 12, using maximum allowed: 8 [ 232.088635][ T7639] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 232.097801][ T7639] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 232.173005][ T6877] EXT4-fs (loop4): unmounting filesystem. [ 232.244818][ T7645] loop4: detected capacity change from 0 to 512 [ 232.257614][ T7645] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 232.286981][ T7645] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1241: inode #1: comm syz.4.1241: iget: illegal inode # [ 232.304945][ T7645] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1241: error while reading EA inode 1 err=-117 [ 232.309522][ T5084] usb 4-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 232.326994][ T7645] EXT4-fs (loop4): 1 orphan inode deleted [ 232.333317][ T7645] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 232.342736][ T5084] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.370122][ T5084] usb 4-1: config 0 descriptor?? [ 232.399130][ T6877] EXT4-fs (loop4): unmounting filesystem. [ 232.429551][ T3603] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 232.689964][ T7657] netlink: 'syz.4.1245': attribute type 10 has an invalid length. [ 232.691396][ T7622] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(7) [ 232.704364][ T7622] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 232.727657][ T7622] vhci_hcd vhci_hcd.0: Device attached [ 232.772859][ T7656] usbip_core: unknown command [ 232.777669][ T7656] vhci_hcd: unknown pdu 873187678 [ 232.810334][ T7656] usbip_core: unknown command [ 232.819808][ T3603] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.836720][ T4228] vhci_hcd: stop threads [ 232.841586][ T4228] vhci_hcd: release socket [ 232.851214][ T4228] vhci_hcd: disconnect device [ 232.899729][ T5084] usb 4-1: string descriptor 0 read error: -71 [ 232.914531][ T5084] usb 4-1: USB disconnect, device number 13 [ 232.920940][ T3595] vhci_hcd: vhci_device speed not set [ 233.029686][ T3603] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 233.042463][ T3603] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.055526][ T3603] usb 1-1: Product: syz [ 233.059816][ T3603] usb 1-1: Manufacturer: syz [ 233.064483][ T3603] usb 1-1: SerialNumber: syz [ 233.073185][ T3603] usb 1-1: config 0 descriptor?? [ 233.530511][ T3603] snd-usb-audio: probe of 1-1:0.0 failed with error -2 [ 233.547715][ T3603] usb 1-1: USB disconnect, device number 16 [ 233.581980][ T7673] loop4: detected capacity change from 0 to 64 [ 233.608133][ T7673] hfs: get root inode failed [ 233.797221][ T7678] loop3: detected capacity change from 0 to 512 [ 233.804720][ T7678] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 233.827897][ T7678] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.1252: inode #1: comm syz.3.1252: iget: illegal inode # [ 233.841413][ T7678] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.1252: error while reading EA inode 1 err=-117 [ 233.855792][ T7678] EXT4-fs (loop3): 1 orphan inode deleted [ 233.867699][ T7678] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 233.930025][ T3549] EXT4-fs (loop3): unmounting filesystem. [ 234.221787][ T7698] loop0: detected capacity change from 0 to 512 [ 234.251052][ T7698] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz.0.1260: casefold flag without casefold feature [ 234.277308][ T7698] EXT4-fs error (device loop0): __ext4_iget:5044: inode #12: block 2: comm syz.0.1260: invalid block [ 234.293270][ T7698] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.1260: error while reading EA inode 12 err=-117 [ 234.363332][ T7698] EXT4-fs (loop0): 1 orphan inode deleted [ 234.386748][ T7698] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 234.455492][ T27] audit: type=1800 audit(1721115666.134:51): pid=7698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1260" name="bus" dev="loop0" ino=15 res=0 errno=0 [ 234.577398][ T3557] EXT4-fs (loop0): unmounting filesystem. [ 234.802370][ T7716] loop1: detected capacity change from 0 to 1024 [ 234.863702][ T7716] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 234.887934][ T7716] bridge_slave_0: default FDB implementation only supports local addresses [ 235.003411][ T3592] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 235.173352][ T7735] loop4: detected capacity change from 0 to 512 [ 235.216314][ T7735] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.1274: casefold flag without casefold feature [ 235.231574][ T7735] EXT4-fs error (device loop4): __ext4_iget:5044: inode #12: block 2: comm syz.4.1274: invalid block [ 235.244745][ T7735] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1274: error while reading EA inode 12 err=-117 [ 235.258091][ T7735] EXT4-fs (loop4): 1 orphan inode deleted [ 235.267650][ T7735] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 235.309248][ T27] audit: type=1800 audit(1721115666.984:52): pid=7735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1274" name="bus" dev="loop4" ino=15 res=0 errno=0 [ 235.344604][ T6877] EXT4-fs (loop4): unmounting filesystem. [ 235.390459][ T3592] usb 1-1: config 0 has an invalid interface number: 127 but max is 1 [ 235.401832][ T3592] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.412055][ T3592] usb 1-1: config 0 has no interface number 1 [ 235.418260][ T3592] usb 1-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 235.433082][ T3592] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 235.481726][ T3548] EXT4-fs (loop1): unmounting filesystem. [ 235.599420][ T3592] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 235.621931][ T3592] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.648816][ T3592] usb 1-1: Product: syz [ 235.666512][ T3592] usb 1-1: Manufacturer: syz [ 235.685907][ T3592] usb 1-1: SerialNumber: syz [ 235.706212][ T3592] usb 1-1: config 0 descriptor?? [ 235.747692][ T7759] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1283'. [ 235.750209][ T3592] usb-storage 1-1:0.127: USB Mass Storage device detected [ 235.785369][ T3592] usb-storage 1-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 235.831504][ T3592] usb-storage 1-1:0.0: USB Mass Storage device detected [ 235.843784][ T3592] usb-storage 1-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 235.957213][ T3592] usb 1-1: USB disconnect, device number 17 [ 236.117032][ T7770] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1286'. [ 236.126667][ T7770] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1286'. [ 236.151177][ T7769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1286'. [ 236.479375][ T7762] loop4: detected capacity change from 0 to 32768 [ 236.502083][ T7774] loop1: detected capacity change from 0 to 512 [ 236.535263][ T7762] XFS (loop4): Mounting V5 Filesystem [ 236.547545][ T7774] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.1288: casefold flag without casefold feature [ 236.570705][ T7774] EXT4-fs error (device loop1): __ext4_iget:5044: inode #12: block 2: comm syz.1.1288: invalid block [ 236.582883][ T7774] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.1288: error while reading EA inode 12 err=-117 [ 236.599373][ T7774] EXT4-fs (loop1): 1 orphan inode deleted [ 236.615062][ T7774] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 236.648533][ T7762] XFS (loop4): Ending clean mount [ 236.657700][ T7762] XFS (loop4): Quotacheck needed: Please wait. [ 236.668409][ T27] audit: type=1800 audit(1721115668.344:53): pid=7774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1288" name="bus" dev="loop1" ino=15 res=0 errno=0 [ 236.718135][ T7762] XFS (loop4): Quotacheck: Done. [ 236.730841][ T3548] EXT4-fs (loop1): unmounting filesystem. [ 236.802501][ T6877] XFS (loop4): Unmounting Filesystem [ 236.855172][ T7791] loop1: detected capacity change from 0 to 1024 [ 236.924467][ T7791] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 236.941289][ T7791] bridge_slave_0: default FDB implementation only supports local addresses [ 237.307458][ T7804] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1296'. [ 237.527420][ T3548] EXT4-fs (loop1): unmounting filesystem. [ 237.587502][ T7811] loop1: detected capacity change from 0 to 512 [ 237.604465][ T7811] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 237.615127][ T7812] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1297'. [ 237.629904][ T7812] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1297'. [ 237.648431][ T7807] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1297'. [ 237.650435][ T7816] loop0: detected capacity change from 0 to 512 [ 237.698461][ T7816] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 237.714285][ T7811] EXT4-fs error (device loop1): ext4_do_update_inode:5210: inode #16: comm syz.1.1298: corrupted inode contents [ 237.734831][ T7811] EXT4-fs error (device loop1): ext4_dirty_inode:6072: inode #16: comm syz.1.1298: mark_inode_dirty error [ 237.740250][ T7818] loop4: detected capacity change from 0 to 512 [ 237.758921][ T7816] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.1300: inode #1: comm syz.0.1300: iget: illegal inode # [ 237.759139][ T7818] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 237.777515][ T7811] EXT4-fs error (device loop1): ext4_do_update_inode:5210: inode #16: comm syz.1.1298: corrupted inode contents [ 237.799940][ T7816] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.1300: error while reading EA inode 1 err=-117 [ 237.799963][ T7811] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.1298: mark_inode_dirty error [ 237.825822][ T7816] EXT4-fs (loop0): 1 orphan inode deleted [ 237.832620][ T7816] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 237.844913][ T7811] EXT4-fs error (device loop1): ext4_do_update_inode:5210: inode #16: comm syz.1.1298: corrupted inode contents [ 237.848174][ T7818] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 237.873553][ T7818] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038 (0x7fffffff) [ 237.873568][ T7811] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 237.902762][ T7811] EXT4-fs error (device loop1): ext4_do_update_inode:5210: inode #16: comm syz.1.1298: corrupted inode contents [ 237.926165][ T3557] EXT4-fs (loop0): unmounting filesystem. [ 237.934145][ T7811] EXT4-fs error (device loop1): ext4_truncate:4300: inode #16: comm syz.1.1298: mark_inode_dirty error [ 237.946255][ T7811] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 237.976320][ T7811] EXT4-fs (loop1): 1 truncate cleaned up [ 237.994477][ T7811] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 238.007503][ T7811] ext4 filesystem being mounted at /265/file1 supports timestamps until 2038 (0x7fffffff) [ 238.041476][ T4186] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 238.063038][ T4186] EXT4-fs error (device loop1): ext4_release_dquot:6800: comm kworker/u4:13: Failed to release dquot type 1 [ 238.075851][ T27] audit: type=1800 audit(1721115669.754:54): pid=7811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1298" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 238.192421][ T3548] EXT4-fs warning (device loop1): ext4_dirblock_csum_set:426: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 238.232493][ T3548] EXT4-fs warning (device loop1): ext4_dirblock_csum_set:426: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 238.253810][ T3548] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 238.279859][ T3548] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 238.289891][ T3548] EXT4-fs error (device loop1): ext4_acquire_dquot:6777: comm syz-executor: Failed to acquire dquot type 1 [ 238.612209][ T3548] EXT4-fs (loop1): unmounting filesystem. [ 238.660636][ T4228] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 238.698339][ T4186] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.715857][ T4228] EXT4-fs error (device loop1): ext4_release_dquot:6800: comm kworker/u4:14: Failed to release dquot type 1 [ 238.786136][ T7827] loop0: detected capacity change from 0 to 32768 [ 238.827988][ T7827] XFS (loop0): Mounting V5 Filesystem [ 238.847099][ T4186] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.847125][ T7841] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1307'. [ 238.945488][ T7827] XFS (loop0): Ending clean mount [ 238.994628][ T7827] XFS (loop0): Quotacheck needed: Please wait. [ 239.017434][ T4186] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.072976][ T7827] XFS (loop0): Quotacheck: Done. [ 239.143268][ T4186] bond0: (slave netdevsim0): Releasing backup interface [ 239.163046][ T4186] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.181290][ T3557] XFS (loop0): Unmounting Filesystem [ 239.330054][ T3564] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 239.340076][ T3564] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 239.353919][ T3564] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 239.366464][ T3564] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 239.375953][ T3564] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 239.383353][ T3564] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 239.618213][ T7853] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1311'. [ 239.931957][ T7849] chnl_net:caif_netlink_parms(): no params data found [ 240.063274][ T7849] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.071148][ T7849] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.085758][ T7849] device bridge_slave_0 entered promiscuous mode [ 240.095237][ T7849] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.108602][ T7849] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.117703][ T7849] device bridge_slave_1 entered promiscuous mode [ 240.169029][ T7849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.181320][ T7849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.200968][ T7878] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 240.245529][ T7849] team0: Port device team_slave_0 added [ 240.259319][ T7849] team0: Port device team_slave_1 added [ 240.310557][ T7849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.317639][ T7849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.353141][ T7849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.450067][ T7849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.459974][ T7849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.501714][ T7849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.529469][ T5083] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 240.748116][ T4186] device hsr_slave_0 left promiscuous mode [ 240.756545][ T6877] EXT4-fs (loop4): unmounting filesystem. [ 240.779869][ T4186] device hsr_slave_1 left promiscuous mode [ 240.799543][ T4186] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.851515][ T4186] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.859602][ T5083] usb 1-1: too many configurations: 12, using maximum allowed: 8 [ 240.890060][ T4186] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.928487][ T4186] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.953163][ T4186] device bridge_slave_1 left promiscuous mode [ 240.978094][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.011281][ T4186] device bridge_slave_0 left promiscuous mode [ 241.018136][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.117035][ T4186] device veth1_macvtap left promiscuous mode [ 241.142441][ T4186] device veth0_macvtap left promiscuous mode [ 241.164949][ T4186] device veth1_vlan left promiscuous mode [ 241.180453][ T4186] device veth0_vlan left promiscuous mode [ 241.449644][ T3564] Bluetooth: hci1: command tx timeout [ 241.582208][ T5083] usb 1-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 241.599703][ T5083] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.652513][ T5083] usb 1-1: config 0 descriptor?? [ 241.670816][ T7880] loop2: detected capacity change from 0 to 32768 [ 241.744551][ T7880] XFS (loop2): Mounting V5 Filesystem [ 241.836221][ T7880] XFS (loop2): Ending clean mount [ 241.859006][ T7880] XFS (loop2): Quotacheck needed: Please wait. [ 241.932789][ T7880] XFS (loop2): Quotacheck: Done. [ 241.955746][ T3603] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 241.997918][ T7878] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(7) [ 242.004447][ T7878] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 242.018530][ T3559] XFS (loop2): Unmounting Filesystem [ 242.048030][ T7878] vhci_hcd vhci_hcd.0: Device attached [ 242.195809][ T4186] team0 (unregistering): Port device team_slave_1 removed [ 242.209904][ T7912] vhci_hcd: connection closed [ 242.210138][ T4925] vhci_hcd: stop threads [ 242.229596][ T4925] vhci_hcd: release socket [ 242.246122][ T4925] vhci_hcd: disconnect device [ 242.249497][ T3592] vhci_hcd: vhci_device speed not set [ 242.270571][ T5083] usb 1-1: string descriptor 0 read error: -71 [ 242.291790][ T5083] usb 1-1: USB disconnect, device number 18 [ 242.299655][ T4186] team0 (unregistering): Port device team_slave_0 removed [ 242.368431][ T4186] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.380607][ T3603] usb 5-1: config 0 has an invalid interface number: 127 but max is 1 [ 242.395635][ T3603] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.416708][ T3603] usb 5-1: config 0 has no interface number 1 [ 242.436866][ T3603] usb 5-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 242.457755][ T3603] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 242.514400][ T4186] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.543535][ T7919] __nla_validate_parse: 4 callbacks suppressed [ 242.543550][ T7919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1327'. [ 242.600874][ T7921] capability: warning: `syz.3.1328' uses deprecated v2 capabilities in a way that may be insecure [ 242.615108][ T7921] loop3: detected capacity change from 0 to 8 [ 242.627694][ T7921] squashfs: Unknown parameter '& ' [ 242.633561][ T3603] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 242.645847][ T3603] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.654119][ T3603] usb 5-1: Product: syz [ 242.658363][ T3603] usb 5-1: Manufacturer: syz [ 242.663019][ T3603] usb 5-1: SerialNumber: syz [ 242.671461][ T3603] usb 5-1: config 0 descriptor?? [ 242.830180][ T3603] usb-storage 5-1:0.127: USB Mass Storage device detected [ 243.251245][ T3603] usb-storage 5-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 243.680705][ T3564] Bluetooth: hci1: command tx timeout [ 243.722010][ T3603] usb-storage 5-1:0.0: USB Mass Storage device detected [ 243.755092][ T3603] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 243.808836][ T3603] usb 5-1: USB disconnect, device number 20 [ 243.944726][ T4186] bond0 (unregistering): Released all slaves [ 244.009376][ T3597] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 244.037988][ T7849] device hsr_slave_0 entered promiscuous mode [ 244.044959][ T7849] device hsr_slave_1 entered promiscuous mode [ 244.053543][ T7849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 244.071881][ T7849] Cannot create hsr debugfs directory [ 244.105034][ T7934] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1331'. [ 244.249347][ T3597] usb 4-1: Using ep0 maxpacket: 16 [ 244.529522][ T3597] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 244.538865][ T3597] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.559305][ T3597] usb 4-1: Product: syz [ 244.563559][ T3597] usb 4-1: Manufacturer: syz [ 244.588483][ T3597] usb 4-1: SerialNumber: syz [ 244.589301][ T5084] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 244.602443][ T3597] usb 4-1: config 0 descriptor?? [ 244.637766][ T7849] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 244.655120][ T3597] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 244.665379][ T7849] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 244.668335][ T3597] usb 4-1: Detected FT232H [ 244.681437][ T7849] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 244.700814][ T7849] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 244.845260][ T7849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.858421][ T7929] loop3: detected capacity change from 0 to 128 [ 244.865527][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 244.885931][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 244.893606][ T5084] usb 3-1: Using ep0 maxpacket: 8 [ 244.908626][ T7849] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.909396][ T3597] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 244.922957][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 244.938113][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 244.947025][ T3595] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.954187][ T3595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.959318][ T3597] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 244.979945][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 244.988550][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 244.993920][ T3597] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 244.997698][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 245.012171][ T3595] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.019334][ T3595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.025478][ T3597] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 245.027502][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 245.042770][ T5084] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 245.052257][ T5084] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.062069][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 245.071777][ T5084] usb 3-1: config 0 descriptor?? [ 245.074717][ T3597] usb 4-1: USB disconnect, device number 14 [ 245.077585][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 245.094269][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 245.119603][ T3597] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 245.126141][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 245.146500][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 245.149488][ T3597] ftdi_sio 4-1:0.0: device disconnected [ 245.159708][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 245.188863][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 245.209850][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 245.228288][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 245.247534][ T7945] loop0: detected capacity change from 0 to 32768 [ 245.248516][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 245.271778][ T7849] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 245.295749][ T7945] XFS (loop0): Mounting V5 Filesystem [ 245.406134][ T7945] XFS (loop0): Ending clean mount [ 245.417510][ T7958] loop2: detected capacity change from 0 to 512 [ 245.426326][ T7958] EXT4-fs (loop2): Test dummy encryption mode enabled [ 245.433851][ T7958] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 245.459342][ T7945] XFS (loop0): Quotacheck needed: Please wait. [ 245.461620][ T7958] EXT4-fs (loop2): 1 truncate cleaned up [ 245.469536][ T5466] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 245.489264][ T7958] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 245.514919][ T7945] XFS (loop0): Quotacheck: Done. [ 245.561093][ T7942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.572545][ T3557] XFS (loop0): Unmounting Filesystem [ 245.607332][ T7942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.660671][ T5084] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 245.681736][ T5084] asix: probe of 3-1:0.0 failed with error -71 [ 245.693509][ T3564] Bluetooth: hci1: command tx timeout [ 245.718577][ T5084] usb 3-1: USB disconnect, device number 14 [ 245.720611][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 245.739852][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 245.764800][ T7849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.799297][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 245.808578][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 245.837628][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 245.846631][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 245.854715][ T5466] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.872217][ T7849] device veth0_vlan entered promiscuous mode [ 245.887539][ T7849] device veth1_vlan entered promiscuous mode [ 245.898262][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 245.907122][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 245.915328][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 245.942993][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 245.954657][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 245.963974][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 245.980197][ T7849] device veth0_macvtap entered promiscuous mode [ 245.993609][ T7849] device veth1_macvtap entered promiscuous mode [ 246.007741][ T7971] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 925 (only 8 groups) [ 246.028255][ T7849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.041022][ T7849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.051391][ T5466] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 246.060903][ T7849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.071891][ T5466] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.080294][ T7849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.093418][ T5466] usb 5-1: Product: syz [ 246.097612][ T5466] usb 5-1: Manufacturer: syz [ 246.102574][ T5466] usb 5-1: SerialNumber: syz [ 246.108422][ T7849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.117926][ T5466] usb 5-1: config 0 descriptor?? [ 246.125562][ T7849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.138846][ T7849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.149062][ T7849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.160838][ T7849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.172652][ T7849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.183558][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 246.192394][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 246.201015][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 246.210385][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 246.214675][ T3559] EXT4-fs (loop2): unmounting filesystem. [ 246.220637][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 246.237160][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 246.249647][ T7849] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.261854][ T7849] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.273766][ T7849] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.283397][ T7849] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.392244][ T7978] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1343'. [ 246.397378][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.408591][ T5466] snd-usb-audio: probe of 5-1:0.0 failed with error -2 [ 246.435773][ T5466] usb 5-1: USB disconnect, device number 21 [ 246.445154][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.477954][ T5088] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 246.514565][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.526557][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.540708][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 246.869552][ T3594] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 246.933030][ T7992] loop2: detected capacity change from 0 to 32768 [ 246.947086][ T7992] XFS (loop2): Mounting V5 Filesystem [ 246.988187][ T7992] XFS (loop2): Ending clean mount [ 246.995666][ T7992] XFS (loop2): Quotacheck needed: Please wait. [ 247.027004][ T7992] XFS (loop2): Quotacheck: Done. [ 247.055533][ T3559] XFS (loop2): Unmounting Filesystem [ 247.119268][ T3594] usb 2-1: Using ep0 maxpacket: 32 [ 247.229281][ T5084] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 247.239457][ T3594] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 247.254095][ T3594] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 247.395631][ T8013] smc: net device wg0 applied user defined pnetid SYZ0 [ 247.422310][ T3594] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 247.432170][ T8013] smc: net device wg0 erased user defined pnetid SYZ0 [ 247.438408][ T3594] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.464952][ T3594] usb 2-1: Product: syz [ 247.474897][ T3594] usb 2-1: Manufacturer: syz [ 247.483473][ T3594] usb 2-1: SerialNumber: syz [ 247.499409][ T5084] usb 5-1: Using ep0 maxpacket: 16 [ 247.601793][ T8021] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1357'. [ 247.654746][ T8025] loop0: detected capacity change from 0 to 64 [ 247.694838][ T8025] hfs: get root inode failed [ 247.770272][ T3564] Bluetooth: hci1: command tx timeout [ 247.780637][ T3594] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 247.782279][ T5084] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 247.817251][ T3594] usb 2-1: USB disconnect, device number 16 [ 247.835105][ T3594] usblp0: removed [ 247.958463][ T5084] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.966909][ T5084] usb 5-1: Product: syz [ 247.971157][ T5084] usb 5-1: Manufacturer: syz [ 247.985223][ T5084] usb 5-1: SerialNumber: syz [ 247.992522][ T5084] usb 5-1: config 0 descriptor?? [ 248.030404][ T5084] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 248.038396][ T5084] usb 5-1: Detected FT232H [ 248.233436][ T7995] loop4: detected capacity change from 0 to 128 [ 248.245991][ T8024] loop2: detected capacity change from 0 to 32768 [ 248.279329][ T5084] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 248.303810][ T5084] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 248.324146][ T8024] XFS (loop2): Mounting V5 Filesystem [ 248.339644][ T5084] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 248.350026][ T5084] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 248.359477][ T5084] usb 5-1: USB disconnect, device number 22 [ 248.379551][ T5084] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 248.389090][ T5084] ftdi_sio 5-1:0.0: device disconnected [ 248.437944][ T8024] XFS (loop2): Ending clean mount [ 248.461232][ T8024] XFS (loop2): Quotacheck needed: Please wait. [ 248.528904][ T8024] XFS (loop2): Quotacheck: Done. [ 248.578673][ T3559] XFS (loop2): Unmounting Filesystem [ 248.967492][ T8053] smc: net device wg0 applied user defined pnetid SYZ0 [ 248.987239][ T8057] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 925 (only 8 groups) [ 249.001605][ T8053] smc: net device wg0 erased user defined pnetid SYZ0 [ 249.182565][ T8062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1370'. [ 249.409450][ T5466] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 249.446722][ T8081] loop2: detected capacity change from 0 to 64 [ 249.466924][ T8081] hfs: get root inode failed [ 249.629365][ T8086] smc: net device wg0 applied user defined pnetid SYZ0 [ 249.647777][ T8086] smc: net device wg0 erased user defined pnetid SYZ0 [ 249.650267][ T5466] usb 5-1: Using ep0 maxpacket: 32 [ 249.713798][ T8068] loop0: detected capacity change from 0 to 32768 [ 249.738559][ T8089] loop1: detected capacity change from 0 to 512 [ 249.746889][ T8089] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 249.765912][ T8068] XFS (loop0): Mounting V5 Filesystem [ 249.786919][ T8089] EXT4-fs (loop1): 1 truncate cleaned up [ 249.789517][ T5466] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 249.792846][ T8089] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 249.819065][ T5466] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 249.856969][ T8068] XFS (loop0): Ending clean mount [ 249.864390][ T7849] EXT4-fs (loop1): unmounting filesystem. [ 249.864417][ T8068] XFS (loop0): Quotacheck needed: Please wait. [ 249.921863][ T8068] XFS (loop0): Quotacheck: Done. [ 249.952660][ T8103] fuse: Bad value for 'fd' [ 249.993923][ T3557] XFS (loop0): Unmounting Filesystem [ 249.999664][ T5466] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 250.020273][ T5466] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.037280][ T5466] usb 5-1: Product: syz [ 250.043973][ T5466] usb 5-1: Manufacturer: syz [ 250.048655][ T5466] usb 5-1: SerialNumber: syz [ 250.320645][ T5466] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 250.329735][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 250.341044][ T5466] usb 5-1: USB disconnect, device number 23 [ 250.358825][ T5466] usblp0: removed [ 251.465924][ T8158] loop4: detected capacity change from 0 to 64 [ 251.529163][ T8158] hfs: get root inode failed [ 251.727645][ T8146] loop2: detected capacity change from 0 to 32768 [ 251.786865][ T8146] XFS (loop2): Mounting V5 Filesystem [ 251.902560][ T8146] XFS (loop2): Ending clean mount [ 251.928807][ T8146] XFS (loop2): Quotacheck needed: Please wait. [ 252.007069][ T8146] XFS (loop2): Quotacheck: Done. [ 252.068450][ T3559] XFS (loop2): Unmounting Filesystem [ 252.089849][ T5084] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 252.102773][ T8184] fuse: Bad value for 'fd' [ 252.359286][ T5084] usb 2-1: Using ep0 maxpacket: 32 [ 252.381958][ T8188] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1414'. [ 252.505648][ T5084] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 252.519330][ T5084] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 252.679266][ T3594] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 252.705145][ T5084] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 252.724496][ T5084] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.742781][ T5084] usb 2-1: Product: syz [ 252.749545][ T5084] usb 2-1: Manufacturer: syz [ 252.759384][ T5084] usb 2-1: SerialNumber: syz [ 252.784339][ T3592] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 252.919296][ T3594] usb 3-1: Using ep0 maxpacket: 8 [ 253.039501][ T3594] usb 3-1: config 32 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 253.053118][ T5084] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 253.062153][ T3594] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 253.084265][ T3594] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.092882][ T5084] usb 2-1: USB disconnect, device number 17 [ 253.113324][ T5084] usblp0: removed [ 253.149438][ T3592] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.319562][ T3592] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 253.336006][ T3592] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.346274][ T3592] usb 4-1: Product: syz [ 253.357363][ T3592] usb 4-1: Manufacturer: syz [ 253.363612][ T3592] usb 4-1: SerialNumber: syz [ 253.387810][ T3592] usb 4-1: config 0 descriptor?? [ 253.403073][ T3594] usb 3-1: string descriptor 0 read error: -71 [ 253.412129][ T3594] hub 3-1:32.0: bad descriptor, ignoring hub [ 253.436949][ T3594] hub: probe of 3-1:32.0 failed with error -5 [ 253.658787][ T3592] snd-usb-audio: probe of 4-1:0.0 failed with error -2 [ 253.671008][ T3592] usb 4-1: USB disconnect, device number 15 [ 253.699921][ T3594] usb 3-1: USB disconnect, device number 15 [ 254.214290][ T8231] loop4: detected capacity change from 0 to 512 [ 254.256072][ T8231] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 254.256695][ T8233] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1432'. [ 254.315326][ T8231] EXT4-fs (loop4): 1 truncate cleaned up [ 254.329747][ T8231] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 254.355856][ T8237] loop2: detected capacity change from 0 to 256 [ 254.675917][ T8243] loop3: detected capacity change from 0 to 512 [ 254.729482][ T8243] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 254.800106][ T8243] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.1437: inode #1: comm syz.3.1437: iget: illegal inode # [ 254.819339][ T5084] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 254.840882][ T8243] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.1437: error while reading EA inode 1 err=-117 [ 254.872820][ T6877] EXT4-fs (loop4): unmounting filesystem. [ 254.899605][ T8243] EXT4-fs (loop3): 1 orphan inode deleted [ 254.905489][ T8243] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 254.998123][ T3549] EXT4-fs (loop3): unmounting filesystem. [ 255.095253][ T5084] usb 1-1: Using ep0 maxpacket: 32 [ 255.239558][ T5084] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 255.269403][ T5084] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 255.284758][ T8264] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1445'. [ 255.295561][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.302066][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.328801][ T8264] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1445'. [ 255.365010][ T8259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1445'. [ 255.479557][ T5084] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 255.498795][ T5084] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.517184][ T5084] usb 1-1: Product: syz [ 255.521583][ T5084] usb 1-1: Manufacturer: syz [ 255.526292][ T5084] usb 1-1: SerialNumber: syz [ 255.556858][ T3564] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 255.572071][ T3564] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 255.581524][ T3564] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 255.590307][ T3564] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 255.597768][ T3564] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 255.607531][ T3564] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 255.811070][ T5084] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 255.859256][ T5084] usb 1-1: USB disconnect, device number 19 [ 255.871432][ T8282] loop3: detected capacity change from 0 to 1024 [ 255.900760][ T5084] usblp0: removed [ 256.140970][ T8274] chnl_net:caif_netlink_parms(): no params data found [ 256.467419][ T8274] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.498774][ T8274] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.535230][ T8274] device bridge_slave_0 entered promiscuous mode [ 256.588507][ T8274] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.635761][ T8274] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.666295][ T8274] device bridge_slave_1 entered promiscuous mode [ 256.746952][ T8274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.813791][ T8274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.847041][ T8300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1457'. [ 257.006724][ T8312] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1459'. [ 257.009728][ T3790] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.032993][ T8312] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1459'. [ 257.049136][ T8274] team0: Port device team_slave_0 added [ 257.075754][ T8304] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1459'. [ 257.076624][ T8274] team0: Port device team_slave_1 added [ 257.143608][ T3790] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.164391][ T8274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.172286][ T8274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.198536][ T8274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.214469][ T8274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.221787][ T8274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.248076][ T8274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.284118][ T3790] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.390078][ T8274] device hsr_slave_0 entered promiscuous mode [ 257.402464][ T8274] device hsr_slave_1 entered promiscuous mode [ 257.416614][ T8274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 257.433989][ T8274] Cannot create hsr debugfs directory [ 257.461306][ T3790] team0: Port device netdevsim0 removed [ 257.466450][ T5084] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 257.469842][ T3790] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.518555][ T8331] overlayfs: missing 'lowerdir' [ 257.689326][ T3550] Bluetooth: hci2: command tx timeout [ 257.711728][ T5084] usb 2-1: Using ep0 maxpacket: 32 [ 257.855989][ T5084] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 257.876741][ T5084] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 258.010761][ T8341] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1475'. [ 258.020023][ T8341] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1475'. [ 258.069464][ T5084] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 258.078523][ T5084] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.113364][ T5084] usb 2-1: Product: syz [ 258.117548][ T5084] usb 2-1: Manufacturer: syz [ 258.135927][ T5084] usb 2-1: SerialNumber: syz [ 258.286298][ T8333] loop0: detected capacity change from 0 to 65536 [ 258.307172][ T8333] XFS (loop0): Mounting V5 Filesystem [ 258.363448][ T8333] XFS (loop0): Ending clean mount [ 258.372968][ T8333] XFS (loop0): Quotacheck needed: Please wait. [ 258.410536][ T5084] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 258.418054][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 258.438145][ T5084] usb 2-1: USB disconnect, device number 18 [ 258.453289][ T5084] usblp0: removed [ 258.459384][ T8333] XFS (loop0): Quotacheck: Done. [ 258.469445][ T3592] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 258.549108][ T3557] XFS (loop0): Unmounting Filesystem [ 258.722008][ T3592] usb 3-1: Using ep0 maxpacket: 16 [ 258.762334][ T8372] netlink: 'syz.3.1486': attribute type 10 has an invalid length. [ 258.777299][ T8372] bond0: (slave netdevsim0): Releasing backup interface [ 258.788799][ T8372] team0: Port device netdevsim0 added [ 258.804887][ T8274] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 258.823889][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 258.832596][ T8373] netlink: 'syz.3.1486': attribute type 10 has an invalid length. [ 258.848287][ T8373] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 258.888921][ T8373] team0: Failed to send options change via netlink (err -105) [ 258.899470][ T8373] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 258.913726][ T8373] team0: Port device netdevsim0 removed [ 258.952300][ T8373] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 258.962134][ T8274] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 258.977374][ T3790] device hsr_slave_0 left promiscuous mode [ 258.991635][ T3790] device hsr_slave_1 left promiscuous mode [ 258.998404][ T3790] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.999437][ T3592] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 259.016159][ T3790] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.017118][ T3592] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.033456][ T3592] usb 3-1: Product: syz [ 259.037930][ T3592] usb 3-1: Manufacturer: syz [ 259.042932][ T3592] usb 3-1: SerialNumber: syz [ 259.048473][ T3790] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.062264][ T3592] usb 3-1: config 0 descriptor?? [ 259.067462][ T3790] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.077467][ T3790] device bridge_slave_1 left promiscuous mode [ 259.088859][ T3790] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.095052][ T8382] loop1: detected capacity change from 0 to 512 [ 259.103526][ T8382] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 259.103739][ T3790] device bridge_slave_0 left promiscuous mode [ 259.115249][ T3592] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 259.128213][ T3790] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.128917][ T3592] usb 3-1: Detected FT232H [ 259.146397][ T8382] EXT4-fs (loop1): 1 truncate cleaned up [ 259.152632][ T8382] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 259.184954][ T3790] device veth1_macvtap left promiscuous mode [ 259.197918][ T3790] device veth0_macvtap left promiscuous mode [ 259.205043][ T3790] device veth1_vlan left promiscuous mode [ 259.223133][ T3790] device veth0_vlan left promiscuous mode [ 259.318186][ T8350] loop2: detected capacity change from 0 to 128 [ 259.361780][ T3790] bond1 (unregistering): (slave bridge1): Releasing active interface [ 259.371503][ T3790] device bridge1 left promiscuous mode [ 259.423102][ T3790] bond1 (unregistering): Released all slaves [ 259.708465][ T3790] team0 (unregistering): Port device team_slave_1 removed [ 259.744337][ T3790] team0 (unregistering): Port device team_slave_0 removed [ 259.774095][ T3550] Bluetooth: hci2: command tx timeout [ 259.790440][ T3790] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.828988][ T3790] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.135964][ T3790] bond0 (unregistering): Released all slaves [ 260.210255][ T8375] smc: net device wg0 applied user defined pnetid SYZ0 [ 260.217525][ T8274] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 260.217875][ T8376] smc: net device wg0 erased user defined pnetid SYZ0 [ 260.259518][ T3592] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 260.279438][ T3592] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 260.280699][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 260.308613][ T3592] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 260.321533][ T3592] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 260.331710][ T3592] usb 3-1: USB disconnect, device number 16 [ 260.339744][ T3592] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 260.350887][ T3592] ftdi_sio 3-1:0.0: device disconnected [ 260.363391][ T8274] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 260.414828][ T8396] loop3: detected capacity change from 0 to 256 [ 260.426868][ T8084] EXT4-fs (loop1): unmounting filesystem. [ 260.609484][ T8274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.631736][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 260.640129][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 260.658695][ T8274] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.707852][ T5084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 260.734955][ T5084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 260.746132][ T5084] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.753261][ T5084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.788060][ T5084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 260.809896][ T5084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 260.818394][ T5084] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.825527][ T5084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.839347][ T3597] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 260.856808][ T5084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 260.898800][ T5088] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 260.915609][ T5088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 260.936424][ T5088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 260.948100][ T5088] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 260.957358][ T5088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 260.968785][ T5088] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 260.987201][ T5088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 260.998295][ T5088] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 261.013173][ T8404] netlink: 'syz.3.1500': attribute type 10 has an invalid length. [ 261.089277][ T3597] usb 1-1: Using ep0 maxpacket: 32 [ 261.095869][ T8404] bond0: (slave netdevsim0): Releasing backup interface [ 261.153341][ T8404] team0: Port device netdevsim0 added [ 261.170740][ T8406] netlink: 'syz.3.1500': attribute type 10 has an invalid length. [ 261.182357][ T8406] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 261.195937][ T3564] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 261.205507][ T3564] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 261.213600][ T3597] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 261.224759][ T3597] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 261.235877][ T3564] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 261.244094][ T3564] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 261.252997][ T8406] team0: Failed to send options change via netlink (err -105) [ 261.260702][ T3564] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 261.268096][ T3564] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 261.275736][ T8406] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 261.297352][ T8406] team0: Port device netdevsim0 removed [ 261.309827][ T8406] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 261.331075][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 261.374836][ T8274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 261.393391][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 261.399337][ T3597] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 261.409820][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 261.410307][ T3597] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.425977][ T3597] usb 1-1: Product: syz [ 261.430271][ T3597] usb 1-1: Manufacturer: syz [ 261.434875][ T3597] usb 1-1: SerialNumber: syz [ 261.614511][ T8410] chnl_net:caif_netlink_parms(): no params data found [ 261.700249][ T3597] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 261.720771][ T3597] usb 1-1: USB disconnect, device number 20 [ 261.728949][ T3597] usblp0: removed [ 261.761587][ T8410] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.811957][ T8410] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.849253][ T3550] Bluetooth: hci2: command tx timeout [ 261.849579][ T8410] device bridge_slave_0 entered promiscuous mode [ 261.903330][ T8422] smc: net device wg0 applied user defined pnetid SYZ0 [ 261.919802][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 261.927232][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 261.944111][ T8425] smc: net device wg0 erased user defined pnetid SYZ0 [ 261.949629][ T8410] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.967084][ T8410] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.975446][ T8410] device bridge_slave_1 entered promiscuous mode [ 261.991769][ T8274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.095904][ T8410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.137771][ T8410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.241032][ T8410] team0: Port device team_slave_0 added [ 262.258605][ T8410] team0: Port device team_slave_1 added [ 262.287491][ T8437] loop0: detected capacity change from 0 to 512 [ 262.300632][ T8434] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 262.306705][ T8437] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 262.308968][ T8434] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 262.363976][ T8410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.372272][ T8437] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.1506: inode #1: comm syz.0.1506: iget: illegal inode # [ 262.390225][ T8410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.399809][ T8437] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.1506: error while reading EA inode 1 err=-117 [ 262.418418][ T8410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.447942][ T8410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.455059][ T8410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.481880][ T8410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.529719][ T8437] EXT4-fs (loop0): 1 orphan inode deleted [ 262.535504][ T8437] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 262.576675][ T8410] device hsr_slave_0 entered promiscuous mode [ 262.612903][ T8410] device hsr_slave_1 entered promiscuous mode [ 262.636535][ T8410] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.668292][ T8410] Cannot create hsr debugfs directory [ 262.752231][ T3557] EXT4-fs (loop0): unmounting filesystem. [ 263.048551][ T8451] loop0: detected capacity change from 0 to 164 [ 263.132853][ T8410] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.150089][ T8451] rock: directory entry would overflow storage [ 263.188953][ T8451] rock: sig=0x4f50, size=4, remaining=3 [ 263.199771][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 263.208436][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 263.223500][ T8451] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 263.283665][ T8410] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.289478][ T3550] Bluetooth: hci1: command tx timeout [ 263.331081][ T8454] netlink: 'syz.2.1509': attribute type 10 has an invalid length. [ 263.356779][ T8432] loop3: detected capacity change from 0 to 32768 [ 263.371502][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 263.405190][ T8455] netlink: 'syz.2.1509': attribute type 10 has an invalid length. [ 263.437981][ T8432] XFS (loop3): Mounting V5 Filesystem [ 263.454124][ T8455] team0: Port device netdevsim0 removed [ 263.468490][ T8455] device netdevsim0 entered promiscuous mode [ 263.502877][ T8455] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 263.555779][ T8410] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.561293][ T8432] XFS (loop3): Ending clean mount [ 263.573766][ T8432] XFS (loop3): Quotacheck needed: Please wait. [ 263.600346][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 263.600805][ T8432] XFS (loop3): Quotacheck: Done. [ 263.615996][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 263.647379][ T8274] device veth0_vlan entered promiscuous mode [ 263.655405][ T3549] XFS (loop3): Unmounting Filesystem [ 263.681931][ T8410] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.751586][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 263.767254][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 263.793477][ T8274] device veth1_vlan entered promiscuous mode [ 263.866679][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 263.878432][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 263.915071][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 263.929325][ T3550] Bluetooth: hci2: command tx timeout [ 263.938027][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 263.966710][ T8274] device veth0_macvtap entered promiscuous mode [ 264.005315][ T8274] device veth1_macvtap entered promiscuous mode [ 264.095373][ T8274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.118517][ T8274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.128828][ T8274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.140223][ T8274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.151892][ T8274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.175300][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 264.185725][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 264.197427][ T8478] loop0: detected capacity change from 0 to 512 [ 264.205172][ T8478] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 264.209912][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 264.234035][ T8478] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.1515: inode #1: comm syz.0.1515: iget: illegal inode # [ 264.236341][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 264.257141][ T8478] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.1515: error while reading EA inode 1 err=-117 [ 264.273471][ T8274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.284187][ T8274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.294328][ T8274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.294337][ T8478] EXT4-fs (loop0): 1 orphan inode deleted [ 264.304935][ T8274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.322025][ T8274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.331115][ T8478] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 264.428433][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 264.429578][ T3603] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 264.450396][ T3557] EXT4-fs (loop0): unmounting filesystem. [ 264.458121][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 264.470879][ T8274] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.486567][ T8274] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.505640][ T8274] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.514669][ T8274] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.533933][ T8410] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 264.584069][ T8410] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 264.633493][ T8410] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 264.678128][ T8410] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 264.699307][ T3603] usb 3-1: Using ep0 maxpacket: 32 [ 264.774745][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.789646][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.820558][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 264.829717][ T3603] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 264.855036][ T3603] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 264.910635][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.933980][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.972090][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 264.990329][ T8491] netlink: 'syz.0.1518': attribute type 10 has an invalid length. [ 265.029538][ T3603] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 265.038600][ T3603] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.078365][ T3603] usb 3-1: Product: syz [ 265.083253][ T3603] usb 3-1: Manufacturer: syz [ 265.088025][ T3603] usb 3-1: SerialNumber: syz [ 265.105970][ T8410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.127046][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 265.135069][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 265.177699][ T8410] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.198021][ T5089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 265.210263][ T5089] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 265.225876][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 265.228335][ T5089] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.243995][ T5089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.255892][ T5089] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 265.273854][ T5083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 265.291282][ T5083] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 265.300060][ T5083] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.307155][ T5083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.315737][ T5083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 265.354225][ T8499] smc: net device wg0 applied user defined pnetid SYZ0 [ 265.367275][ T3603] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 265.367859][ T8502] smc: net device wg0 erased user defined pnetid SYZ0 [ 265.385385][ T3550] Bluetooth: hci1: command tx timeout [ 265.397314][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 265.413133][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 265.426709][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 265.439015][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 265.455118][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 265.465573][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 265.477848][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 265.488008][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 265.496652][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 265.505566][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 265.536133][ T8410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 265.588214][ T3603] usb 3-1: USB disconnect, device number 17 [ 265.607363][ T3603] usblp0: removed [ 265.858639][ T8521] __nla_validate_parse: 1 callbacks suppressed [ 265.858653][ T8521] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1527'. [ 265.940056][ T3790] device hsr_slave_0 left promiscuous mode [ 265.959787][ T3790] device hsr_slave_1 left promiscuous mode [ 265.967853][ T3790] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.977920][ T3790] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.997442][ T3790] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.005134][ T3790] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.014172][ T3790] device bridge_slave_1 left promiscuous mode [ 266.020638][ T3790] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.030921][ T3790] device bridge_slave_0 left promiscuous mode [ 266.038030][ T3790] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.120026][ T3790] device veth1_macvtap left promiscuous mode [ 266.126074][ T3790] device veth0_macvtap left promiscuous mode [ 266.133690][ T3790] device veth1_vlan left promiscuous mode [ 266.143701][ T3790] device veth0_vlan left promiscuous mode [ 266.181646][ T3594] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 266.280392][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 266.430956][ T3594] usb 1-1: Using ep0 maxpacket: 8 [ 266.549436][ T3594] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 266.565632][ T3594] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 266.586670][ T3594] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.832450][ T8548] loop3: detected capacity change from 0 to 1024 [ 266.861176][ T8548] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 266.879664][ T3594] usb 1-1: string descriptor 0 read error: -71 [ 266.887571][ T3594] hub 1-1:32.0: bad descriptor, ignoring hub [ 266.898341][ T3594] hub: probe of 1-1:32.0 failed with error -5 [ 266.932041][ T3790] team0 (unregistering): Port device team_slave_1 removed [ 266.940992][ T3594] usb 1-1: USB disconnect, device number 21 [ 266.983815][ T3790] team0 (unregistering): Port device team_slave_0 removed [ 267.017858][ T3790] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.055872][ T3790] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.449336][ T3550] Bluetooth: hci1: command tx timeout [ 267.642333][ T3790] bond0 (unregistering): Released all slaves [ 267.801996][ T5083] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 267.830260][ T5083] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 267.854252][ T8546] netlink: 'syz.2.1536': attribute type 10 has an invalid length. [ 267.879833][ T8546] bond0: (slave netdevsim0): Releasing backup interface [ 267.903232][ T8546] device netdevsim0 left promiscuous mode [ 267.928484][ T8546] team0: Port device netdevsim0 added [ 267.958103][ T8410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.037062][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 268.055928][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 268.097430][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 268.117245][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 268.150487][ T8410] device veth0_vlan entered promiscuous mode [ 268.166447][ T5083] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 268.175931][ T5083] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 268.201773][ T8410] device veth1_vlan entered promiscuous mode [ 268.237848][ T8578] netlink: 'syz.0.1549': attribute type 10 has an invalid length. [ 268.271351][ T8579] netlink: 'syz.0.1549': attribute type 10 has an invalid length. [ 268.299071][ T8579] team0: Port device netdevsim0 removed [ 268.345666][ T8579] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 268.366501][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 268.440639][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 268.464454][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 268.503121][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 268.535314][ T8410] device veth0_macvtap entered promiscuous mode [ 268.563105][ T8410] device veth1_macvtap entered promiscuous mode [ 268.608371][ T8410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.647155][ T8410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.694319][ T8410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.725034][ T8410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.758020][ T8410] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.779105][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 268.789919][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 268.806786][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 268.826194][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 268.855864][ T8585] overlayfs: missing 'lowerdir' [ 268.862676][ T8410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.906086][ T8410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.955981][ T8410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.977564][ T8410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.010792][ T8410] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.025978][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 269.039842][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 269.059035][ T8590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1554'. [ 269.113678][ T8590] netlink: 'syz.0.1554': attribute type 2 has an invalid length. [ 269.149730][ T8590] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1554'. [ 269.191629][ T8410] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.216748][ T8410] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.234365][ T8410] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.259214][ T8410] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.275330][ T8598] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1555'. [ 269.315195][ T8598] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1555'. [ 269.363834][ T8595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1555'. [ 269.447896][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.488114][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.524433][ T5083] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 269.529600][ T3550] Bluetooth: hci1: command tx timeout [ 269.544899][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.601546][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.632529][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 269.634853][ T8602] loop3: detected capacity change from 0 to 2048 [ 269.710015][ T8602] UDF-fs: bad mount option "uiÿ=Ggnore" or missing value [ 269.787340][ T8602] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1558'. [ 269.806244][ T8592] loop0: detected capacity change from 0 to 32768 [ 269.993472][ T8575] loop2: detected capacity change from 0 to 65536 [ 269.997681][ T8592] XFS (loop0): Mounting V5 Filesystem [ 270.014035][ T8575] XFS (loop2): Mounting V5 Filesystem [ 270.066560][ T8575] XFS (loop2): Ending clean mount [ 270.075062][ T8575] XFS (loop2): Quotacheck needed: Please wait. [ 270.082294][ T8592] XFS (loop0): Ending clean mount [ 270.146578][ T8575] XFS (loop2): Quotacheck: Done. [ 270.264740][ T3559] XFS (loop2): Unmounting Filesystem [ 270.382168][ T5083] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x4 [ 270.401816][ T5083] XFS (loop0): Unmount and run xfs_repair [ 270.413119][ T5083] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 270.445973][ T5083] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 270.472668][ T5083] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 270.474316][ T3550] Bluetooth: hci2: unexpected cc 0x0402 length: 65 > 1 [ 270.492905][ T5083] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 270.547555][ T5083] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 270.625112][ T5083] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 270.644303][ T5083] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 270.664965][ T5083] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 270.685435][ T5083] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 270.705970][ T3592] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x4 len 4 error 74 [ 270.757959][ T3592] XFS (loop0): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1acd/0x2210 (fs/xfs/libxfs/xfs_defer.c:573). Shutting down filesystem. [ 270.780273][ T3592] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 271.161258][ T3557] XFS (loop0): Unmounting Filesystem [ 271.695336][ T3790] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.828699][ T3790] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.916698][ T3790] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.033752][ T3790] bond0: (slave netdevsim0): Releasing backup interface [ 272.070611][ T3790] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.080427][ T8642] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1567'. [ 272.095895][ T8642] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1567'. [ 272.129146][ T8642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1567'. [ 272.263876][ T3564] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 272.281692][ T3558] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 272.290948][ T3564] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 272.301138][ T3564] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 272.308754][ T3564] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 272.316285][ T3564] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 272.790692][ T8651] chnl_net:caif_netlink_parms(): no params data found [ 272.909017][ T8651] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.940714][ T8651] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.953795][ T27] audit: type=1326 audit(1721115704.634:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8668 comm="syz.1.1575" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa766d75bd9 code=0x0 [ 272.982666][ T8651] device bridge_slave_0 entered promiscuous mode [ 273.037999][ T8651] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.056152][ T8651] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.078983][ T8651] device bridge_slave_1 entered promiscuous mode [ 273.116588][ T8672] random: crng reseeded on system resumption [ 273.242310][ T5083] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 273.270884][ T8651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.285037][ T8651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.464448][ T8655] loop3: detected capacity change from 0 to 65536 [ 273.527919][ T8651] team0: Port device team_slave_0 added [ 273.543971][ T8651] team0: Port device team_slave_1 added [ 273.586053][ T8651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.601329][ T8651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.639681][ T5083] usb 3-1: config 0 has an invalid interface number: 127 but max is 1 [ 273.648246][ T5083] usb 3-1: config 0 has no interface number 1 [ 273.663040][ T8651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.676592][ T5083] usb 3-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 273.703240][ T5083] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 273.717631][ T8655] XFS (loop3): Mounting V5 Filesystem [ 273.726427][ T3790] device hsr_slave_0 left promiscuous mode [ 273.736081][ T3790] device hsr_slave_1 left promiscuous mode [ 273.743037][ T3790] device batadv_slave_0 left promiscuous mode [ 273.746449][ T8655] XFS (loop3): Ending clean mount [ 273.749419][ T3790] bridge0: port 1(batadv_slave_0) entered disabled state [ 273.758454][ T8655] XFS (loop3): Quotacheck needed: Please wait. [ 273.810459][ T3790] device veth1_macvtap left promiscuous mode [ 273.819612][ T3790] device veth0_macvtap left promiscuous mode [ 273.826491][ T3790] device veth1_vlan left promiscuous mode [ 273.837053][ T3790] device veth0_vlan left promiscuous mode [ 273.864880][ T8655] XFS (loop3): Quotacheck: Done. [ 273.899531][ T5083] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 273.908586][ T5083] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.929838][ T5083] usb 3-1: Product: syz [ 273.934027][ T5083] usb 3-1: Manufacturer: syz [ 273.962786][ T5083] usb 3-1: SerialNumber: syz [ 273.973778][ T5083] usb 3-1: config 0 descriptor?? [ 273.998589][ T3549] XFS (loop3): Unmounting Filesystem [ 274.010672][ T5083] usb-storage 3-1:0.127: USB Mass Storage device detected [ 274.038318][ T5083] usb-storage 3-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 274.085222][ T5083] usb-storage 3-1:0.0: USB Mass Storage device detected [ 274.114756][ T5083] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 274.129239][ T5089] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 274.234188][ T6730] usb 3-1: USB disconnect, device number 18 [ 274.409451][ T3564] Bluetooth: hci3: command tx timeout [ 274.489335][ T3564] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 274.497853][ T3564] Bluetooth: hci2: Injecting HCI hardware error event [ 274.510970][ T3550] Bluetooth: hci2: hardware error 0x00 [ 274.524533][ T5089] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.719495][ T5089] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 274.740138][ T5089] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.782183][ T5089] usb 2-1: Product: syz [ 274.789335][ T5089] usb 2-1: Manufacturer: syz [ 274.793963][ T5089] usb 2-1: SerialNumber: syz [ 274.810698][ T5089] usb 2-1: config 0 descriptor?? [ 274.962551][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 275.002406][ T8700] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1579'. [ 275.018721][ T8700] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1579'. [ 275.031974][ T8700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1579'. [ 275.096460][ T5089] snd-usb-audio: probe of 2-1:0.0 failed with error -2 [ 275.104446][ T5089] usb 2-1: USB disconnect, device number 19 [ 275.315463][ T3790] bond0 (unregistering): Released all slaves [ 275.410928][ T8651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.417987][ T8651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.489240][ T8651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.617411][ T8651] device hsr_slave_0 entered promiscuous mode [ 275.634657][ T8651] device hsr_slave_1 entered promiscuous mode [ 275.654671][ T8651] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 275.674352][ T8651] Cannot create hsr debugfs directory [ 276.169288][ T27] audit: type=1326 audit(1721115707.844:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8718 comm="syz.2.1586" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3193575bd9 code=0x0 [ 276.280836][ T8723] random: crng reseeded on system resumption [ 276.489389][ T3564] Bluetooth: hci3: command tx timeout [ 276.526213][ T8709] loop3: detected capacity change from 0 to 32768 [ 276.531090][ T8651] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 276.542805][ T8651] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 276.555679][ T8651] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 276.565379][ T8651] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 276.572444][ T3550] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 276.605155][ T8709] XFS (loop3): Mounting V5 Filesystem [ 276.668812][ T8651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.673043][ T8709] XFS (loop3): Starting recovery (logdev: internal) [ 276.683256][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 276.692835][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 276.705582][ T8651] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.729395][ T6730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 276.734880][ T8709] XFS (loop3): Metadata CRC error detected at xfs_agf_read_verify+0x1df/0x2a0, xfs_agf block 0x1 [ 276.738453][ T6730] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 276.757461][ T6730] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.764595][ T6730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.781924][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 276.789509][ T8709] XFS (loop3): Unmount and run xfs_repair [ 276.795254][ T8709] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 276.803334][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 276.812197][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 276.821001][ T8709] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 20 d1 XAGF.......... . [ 276.831498][ T5466] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.838608][ T5466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.846485][ T8709] 00000010: 90 c7 29 01 00 00 00 02 00 00 00 05 00 00 00 01 ..)............. [ 276.855779][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 276.863914][ T8709] 00000020: 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 06 ................ [ 276.939499][ T8709] 00000030: 00 00 00 06 00 00 13 e3 00 00 13 e0 00 00 00 00 ................ [ 276.959483][ T8709] 00000040: ed 37 bf 6e 74 ea 4e 01 af ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 277.007668][ T8651] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 277.025006][ T8651] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 277.037775][ T8709] 00000050: 00 00 00 01 00 00 00 01 00 00 00 06 00 00 00 01 ................ [ 277.058203][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 277.076962][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 277.085666][ T8709] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 277.099316][ T8709] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 277.101722][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 277.125590][ T8709] XFS (loop3): metadata I/O error in "xfs_read_agf+0x2e2/0x680" at daddr 0x1 len 1 error 74 [ 277.148889][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 277.170080][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 277.195030][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 277.230426][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 277.255285][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 277.278001][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 277.313864][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 277.345515][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 277.459453][ T8748] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 277.819306][ T5089] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 278.085280][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 278.139757][ T5089] usb 2-1: too many configurations: 12, using maximum allowed: 8 [ 278.164298][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 278.183818][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 278.214820][ T8651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.303338][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 278.316630][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 278.346939][ T8758] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1594'. [ 278.388407][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 278.408157][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 278.448103][ T8651] device veth0_vlan entered promiscuous mode [ 278.460466][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 278.484178][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 278.501355][ T8651] device veth1_vlan entered promiscuous mode [ 278.569700][ T3550] Bluetooth: hci3: command tx timeout [ 278.695668][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 278.712308][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 278.787456][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 278.807174][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 278.828489][ T8651] device veth0_macvtap entered promiscuous mode [ 278.840899][ T5089] usb 2-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 278.858794][ T5089] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.882106][ T8651] device veth1_macvtap entered promiscuous mode [ 278.914949][ T5089] usb 2-1: config 0 descriptor?? [ 278.950965][ T8651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.989384][ T8651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.015641][ T8651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.051282][ T8651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.094022][ T8651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.117812][ T8651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.146458][ T8651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.180542][ T5083] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 279.197930][ T5083] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 279.228714][ T5083] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 279.252552][ T8748] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(7) [ 279.259093][ T8748] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 279.267960][ T5083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 279.292005][ T8748] vhci_hcd vhci_hcd.0: Device attached [ 279.324922][ T8651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.344217][ T8651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.355428][ T8763] usbip_core: unknown command [ 279.360518][ T8763] vhci_hcd: unknown pdu 873187678 [ 279.365580][ T8763] usbip_core: unknown command [ 279.391611][ T8651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.410662][ T3550] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 279.421981][ T8651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.431922][ T8651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.437180][ T4186] vhci_hcd: stop threads [ 279.442408][ T8651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.443896][ T8651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.470651][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 279.487528][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 279.496602][ T3594] vhci_hcd: vhci_device speed not set [ 279.503604][ T4186] vhci_hcd: release socket [ 279.514640][ T4186] vhci_hcd: disconnect device [ 279.525152][ T8651] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.554431][ T8651] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.563967][ T8771] serio: Serial port pts0 [ 279.569248][ T3594] usb 11-2: new full-speed USB device number 5 using vhci_hcd [ 279.576779][ T3594] usb 11-2: enqueue for inactive port 1 [ 279.589230][ T8651] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.589361][ T5089] usb 2-1: string descriptor 0 read error: -71 [ 279.598395][ T8651] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.649347][ T5089] usb 2-1: USB disconnect, device number 20 [ 279.689855][ T3594] vhci_hcd: vhci_device speed not set [ 279.741381][ T27] audit: type=1326 audit(1721115711.424:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8775 comm="syz.4.1599" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f74bb575bd9 code=0x0 [ 279.842257][ T4925] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.851947][ T8777] random: crng reseeded on system resumption [ 279.886296][ T4925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.914294][ T5089] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 280.033310][ T8780] fuse: Bad value for 'fd' [ 280.096385][ T4148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.105152][ T4148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.116573][ T5089] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 280.350936][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 280.649434][ T3550] Bluetooth: hci3: command tx timeout [ 280.663438][ T8802] serio: Serial port pts1 [ 281.184355][ T8809] fuse: Bad value for 'fd' [ 281.369034][ T8798] loop0: detected capacity change from 0 to 32768 [ 281.503474][ T8798] XFS (loop0): Mounting V5 Filesystem [ 281.643883][ T8834] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 281.726579][ T8798] XFS (loop0): Ending clean mount [ 281.747357][ T8798] XFS (loop0): Quotacheck needed: Please wait. [ 281.767311][ T27] audit: type=1326 audit(1721115713.444:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8836 comm="syz.3.1618" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a04d75bd9 code=0x0 [ 281.788963][ C1] vkms_vblank_simulate: vblank timer overrun [ 281.877046][ T8838] random: crng reseeded on system resumption [ 281.883949][ T8798] XFS (loop0): Quotacheck: Done. [ 281.939219][ T5090] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 282.091656][ T8651] XFS (loop0): Unmounting Filesystem [ 282.115317][ T8841] loop4: detected capacity change from 0 to 512 [ 282.129924][ T8841] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 282.214835][ T8841] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1619: inode #1: comm syz.4.1619: iget: illegal inode # [ 282.239501][ T8841] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1619: error while reading EA inode 1 err=-117 [ 282.260493][ T8841] EXT4-fs (loop4): 1 orphan inode deleted [ 282.270520][ T8841] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 282.379336][ T5090] usb 3-1: too many configurations: 12, using maximum allowed: 8 [ 282.442390][ T8274] EXT4-fs (loop4): unmounting filesystem. [ 282.642098][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 282.867026][ T3550] Bluetooth: hci1: unexpected cc 0x0402 length: 65 > 1 [ 282.972186][ T8872] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1629'. [ 283.043551][ T8874] loop3: detected capacity change from 0 to 64 [ 283.086671][ T8874] hfs: get root inode failed [ 283.109551][ T5090] usb 3-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 283.129294][ T5090] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.153958][ T5090] usb 3-1: config 0 descriptor?? [ 283.349291][ T3603] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 283.369953][ T8885] loop1: detected capacity change from 0 to 512 [ 283.407208][ T8885] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 283.431961][ T27] audit: type=1326 audit(1721115715.114:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8886 comm="syz.0.1635" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f61fdb75bd9 code=0x0 [ 283.452615][ T8885] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.1633: inode #1: comm syz.1.1633: iget: illegal inode # [ 283.500295][ T8885] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.1633: error while reading EA inode 1 err=-117 [ 283.517571][ T8885] EXT4-fs (loop1): 1 orphan inode deleted [ 283.529359][ T8885] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 283.543164][ T8890] random: crng reseeded on system resumption [ 283.686678][ T8892] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(7) [ 283.693221][ T8892] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 283.709294][ T3603] usb 5-1: Using ep0 maxpacket: 8 [ 283.716444][ T8892] vhci_hcd vhci_hcd.0: Device attached [ 283.829814][ T3603] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 283.919701][ T3603] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 283.933105][ T3603] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.953845][ T8893] usbip_core: unknown command [ 283.958579][ T8893] vhci_hcd: unknown pdu 873187678 [ 283.981398][ T8410] EXT4-fs (loop1): unmounting filesystem. [ 283.988967][ T8893] usbip_core: unknown command [ 284.018658][ T4148] vhci_hcd: stop threads [ 284.029230][ T4148] vhci_hcd: release socket [ 284.030871][ T5089] vhci_hcd: vhci_device speed not set [ 284.068466][ T4148] vhci_hcd: disconnect device [ 284.109321][ T5089] usb 13-2: new full-speed USB device number 3 using vhci_hcd [ 284.120012][ T5089] usb 13-2: enqueue for inactive port 1 [ 284.199508][ T5090] usb 3-1: string descriptor 0 read error: -71 [ 284.213628][ T5090] usb 3-1: USB disconnect, device number 19 [ 284.219740][ T5089] vhci_hcd: vhci_device speed not set [ 284.253377][ T3603] usb 5-1: string descriptor 0 read error: -71 [ 284.260746][ T3603] hub 5-1:32.0: bad descriptor, ignoring hub [ 284.267248][ T3603] hub: probe of 5-1:32.0 failed with error -5 [ 284.319813][ T3603] usb 5-1: USB disconnect, device number 24 [ 284.944505][ T8927] loop2: detected capacity change from 0 to 512 [ 284.970526][ T8927] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 285.013978][ T8927] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.1647: inode #1: comm syz.2.1647: iget: illegal inode # [ 285.040038][ T8927] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.1647: error while reading EA inode 1 err=-117 [ 285.052710][ T8929] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1648'. [ 285.066988][ T8927] EXT4-fs (loop2): 1 orphan inode deleted [ 285.080680][ T8927] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 285.285061][ T3559] EXT4-fs (loop2): unmounting filesystem. [ 286.003520][ T8966] serio: Serial port pts0 [ 286.086415][ T8968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1662'. [ 286.355345][ T8976] loop4: detected capacity change from 0 to 512 [ 286.384191][ T8976] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 286.582490][ T8976] EXT4-fs (loop4): 1 truncate cleaned up [ 286.582518][ T8976] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 286.847180][ T8274] EXT4-fs (loop4): unmounting filesystem. [ 286.889471][ T3550] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 286.898241][ T3550] Bluetooth: hci1: Injecting HCI hardware error event [ 286.911293][ T3564] Bluetooth: hci1: hardware error 0x00 [ 287.210196][ T9000] loop0: detected capacity change from 0 to 128 [ 287.289837][ T6730] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 287.303990][ T9002] serio: Serial port pts0 [ 287.529371][ T6730] usb 5-1: Using ep0 maxpacket: 16 [ 287.637565][ T9011] loop3: detected capacity change from 0 to 1024 [ 287.685996][ T9011] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 287.764680][ T27] audit: type=1800 audit(1721115719.444:60): pid=9011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1676" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 287.785091][ T27] audit: type=1804 audit(1721115719.444:61): pid=9011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1676" name="/newroot/390/file1/bus" dev="loop3" ino=18 res=1 errno=0 [ 287.809832][ T6730] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 287.818881][ T6730] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.875207][ T6730] usb 5-1: Product: syz [ 287.893372][ T6730] usb 5-1: Manufacturer: syz [ 287.913369][ T6730] usb 5-1: SerialNumber: syz [ 287.933514][ T6730] usb 5-1: config 0 descriptor?? [ 287.990464][ T6730] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 288.000026][ T3549] EXT4-fs (loop3): unmounting filesystem. [ 288.006230][ T6730] usb 5-1: Detected FT232H [ 288.129442][ T9015] loop3: detected capacity change from 0 to 1024 [ 288.199799][ T8996] loop4: detected capacity change from 0 to 128 [ 288.269551][ T6730] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 288.285951][ T9018] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1678'. [ 288.291940][ T6730] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 288.329358][ T6730] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 288.338539][ T6730] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 288.385329][ T6730] usb 5-1: USB disconnect, device number 25 [ 288.425902][ T6730] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 288.458022][ T6730] ftdi_sio 5-1:0.0: device disconnected [ 288.462312][ T9025] loop2: detected capacity change from 0 to 64 [ 288.506030][ T9025] hfs: get root inode failed [ 288.969398][ T3564] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 289.916279][ T9038] loop0: detected capacity change from 0 to 2048 [ 289.981805][ T9043] serio: Serial port pts0 [ 290.027732][ T9038] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 290.066601][ T8651] EXT4-fs (loop0): unmounting filesystem. [ 290.263865][ T3564] Bluetooth: hci3: unexpected cc 0x0402 length: 65 > 1 [ 290.392970][ T9071] loop0: detected capacity change from 0 to 64 [ 290.407627][ T9071] hfs: get root inode failed [ 290.576521][ T9076] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1696'. [ 290.869928][ T9081] loop4: detected capacity change from 0 to 2048 [ 290.911619][ T9081] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 290.935246][ T9081] netlink: 'syz.4.1699': attribute type 10 has an invalid length. [ 290.947283][ T9081] netlink: 'syz.4.1699': attribute type 10 has an invalid length. [ 291.880251][ T27] audit: type=1800 audit(1721115723.534:62): pid=9088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1699" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 292.006800][ T8274] EXT4-fs (loop4): unmounting filesystem. [ 292.113242][ T9100] loop2: detected capacity change from 0 to 256 [ 292.139818][ T9100] exfat: Deprecated parameter 'namecase' [ 292.171372][ T9100] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 292.330183][ T9115] loop2: detected capacity change from 0 to 64 [ 292.376852][ T9115] hfs: get root inode failed [ 292.989932][ T9121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1712'. [ 294.329701][ T3564] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 294.338213][ T3564] Bluetooth: hci3: Injecting HCI hardware error event [ 294.348020][ T3550] Bluetooth: hci3: hardware error 0x00 [ 295.082288][ T3790] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.099542][ T3559] syz-executor (3559) used greatest stack depth: 18744 bytes left [ 295.183714][ T3790] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.273928][ T3790] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.358896][ T3790] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.476683][ T3790] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.544991][ T3790] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.598237][ T3790] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.650954][ T3790] team0: Port device netdevsim0 removed [ 295.658222][ T3790] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.651296][ T3550] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 296.662911][ T3550] [ 296.665260][ T3550] ============================================ [ 296.671389][ T3550] WARNING: possible recursive locking detected [ 296.677533][ T3550] 6.1.99-syzkaller #0 Not tainted [ 296.682545][ T3550] -------------------------------------------- [ 296.688671][ T3550] kworker/u5:1/3550 is trying to acquire lock: [ 296.694825][ T3550] ffff888022e11138 ((wq_completion)hci3){+.+.}-{0:0}, at: __flush_workqueue+0x157/0x1610 [ 296.704677][ T3550] [ 296.704677][ T3550] but task is already holding lock: [ 296.712021][ T3550] ffff888022e11138 ((wq_completion)hci3){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 296.721767][ T3550] [ 296.721767][ T3550] other info that might help us debug this: [ 296.729813][ T3550] Possible unsafe locking scenario: [ 296.729813][ T3550] [ 296.737246][ T3550] CPU0 [ 296.740513][ T3550] ---- [ 296.743790][ T3550] lock((wq_completion)hci3); [ 296.748585][ T3550] lock((wq_completion)hci3); [ 296.753335][ T3550] [ 296.753335][ T3550] *** DEADLOCK *** [ 296.753335][ T3550] [ 296.761461][ T3550] May be due to missing lock nesting notation [ 296.761461][ T3550] [ 296.769763][ T3550] 2 locks held by kworker/u5:1/3550: [ 296.775031][ T3550] #0: ffff888022e11138 ((wq_completion)hci3){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 296.785199][ T3550] #1: ffffc90003bbfd20 ((work_completion)(&hdev->error_reset)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 296.796937][ T3550] [ 296.796937][ T3550] stack backtrace: [ 296.802819][ T3550] CPU: 1 PID: 3550 Comm: kworker/u5:1 Not tainted 6.1.99-syzkaller #0 [ 296.810957][ T3550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 296.821027][ T3550] Workqueue: hci3 hci_error_reset [ 296.826044][ T3550] Call Trace: [ 296.829315][ T3550] [ 296.832246][ T3550] dump_stack_lvl+0x1e3/0x2cb [ 296.836925][ T3550] ? nf_tcp_handle_invalid+0x642/0x642 [ 296.842418][ T3550] ? panic+0x764/0x764 [ 296.846480][ T3550] validate_chain+0x4711/0x5950 [ 296.851353][ T3550] ? reacquire_held_locks+0x660/0x660 [ 296.856723][ T3550] ? rcu_read_lock_sched_held+0x89/0x130 [ 296.862349][ T3550] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 296.868321][ T3550] ? reacquire_held_locks+0x660/0x660 [ 296.873702][ T3550] ? rcu_is_watching+0x11/0xb0 [ 296.878458][ T3550] ? __update_load_avg_cfs_rq+0x6cc/0xbe0 [ 296.884168][ T3550] ? cpufreq_update_util+0x94/0x250 [ 296.889367][ T3550] ? update_load_avg+0xf61/0x1540 [ 296.894413][ T3550] ? mark_lock+0x9a/0x340 [ 296.898741][ T3550] __lock_acquire+0x125b/0x1f80 [ 296.903600][ T3550] lock_acquire+0x1f8/0x5a0 [ 296.908103][ T3550] ? __flush_workqueue+0x157/0x1610 [ 296.913319][ T3550] ? read_lock_is_recursive+0x10/0x10 [ 296.918687][ T3550] ? lockdep_softirqs_off+0x420/0x420 [ 296.924084][ T3550] ? __init_swait_queue_head+0xaa/0x140 [ 296.929623][ T3550] ? __flush_workqueue+0x157/0x1610 [ 296.934815][ T3550] __flush_workqueue+0x170/0x1610 [ 296.939826][ T3550] ? __flush_workqueue+0x157/0x1610 [ 296.945023][ T3550] ? trace_contention_end+0x61/0x170 [ 296.950302][ T3550] ? rcu_work_rcufn+0x140/0x140 [ 296.955163][ T3550] ? mark_lock+0x9a/0x340 [ 296.959489][ T3550] drain_workqueue+0xc5/0x390 [ 296.964160][ T3550] destroy_workqueue+0x7b/0xae0 [ 296.969001][ T3550] ? _raw_spin_unlock_irq+0x1f/0x40 [ 296.974194][ T3550] ? lockdep_hardirqs_on+0x94/0x130 [ 296.979384][ T3550] hci_release_dev+0x165/0x16b0 [ 296.984222][ T3550] ? devres_release_all+0x1e1/0x240 [ 296.989414][ T3550] ? _raw_spin_unlock+0x40/0x40 [ 296.994296][ T3550] ? hci_unregister_suspend_notifier+0x90/0x90 [ 297.000439][ T3550] ? devres_release+0x90/0x90 [ 297.005108][ T3550] ? hci_sock_dev_event+0x2ee/0x5e0 [ 297.010297][ T3550] bt_host_release+0x7f/0x90 [ 297.014888][ T3550] ? bt_link_release+0x20/0x20 [ 297.019648][ T3550] device_release+0x91/0x1c0 [ 297.024232][ T3550] kobject_put+0x224/0x460 [ 297.028645][ T3550] ? process_one_work+0x7a9/0x11d0 [ 297.033745][ T3550] process_one_work+0x8a9/0x11d0 [ 297.038727][ T3550] ? worker_detach_from_pool+0x260/0x260 [ 297.044362][ T3550] ? _raw_spin_lock_irqsave+0x120/0x120 [ 297.049901][ T3550] ? kthread_data+0x4e/0xc0 [ 297.054400][ T3550] ? wq_worker_running+0x97/0x190 [ 297.059424][ T3550] worker_thread+0xa47/0x1200 [ 297.064091][ T3550] ? __sched_text_start+0x8/0x8 [ 297.068946][ T3550] kthread+0x28d/0x320 [ 297.073002][ T3550] ? worker_clr_flags+0x190/0x190 [ 297.078015][ T3550] ? kthread_blkcg+0xd0/0xd0 [ 297.082608][ T3550] ret_from_fork+0x1f/0x30 [ 297.087027][ T3550] [ 297.090087][ C1] vkms_vblank_simulate: vblank timer overrun [ 297.288337][ T3790] device hsr_slave_0 left promiscuous mode [ 297.294668][ T3790] device hsr_slave_1 left promiscuous mode [ 297.301314][ T3790] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.308731][ T3790] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.316419][ T3790] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.325363][ T3790] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.332924][ T3790] device bridge_slave_1 left promiscuous mode [ 297.339063][ T3790] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.347139][ T3790] device bridge_slave_0 left promiscuous mode [ 297.353488][ T3790] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.363952][ T3790] device hsr_slave_0 left promiscuous mode [ 297.370261][ T3790] device hsr_slave_1 left promiscuous mode [ 297.376477][ T3790] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.383966][ T3790] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.392087][ T3790] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.399513][ T3790] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.406993][ T3790] device bridge_slave_1 left promiscuous mode [ 297.413529][ T3790] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.421744][ T3790] device bridge_slave_0 left promiscuous mode [ 297.427898][ T3790] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.441466][ T3790] device veth1_macvtap left promiscuous mode [ 297.447567][ T3790] device veth0_macvtap left promiscuous mode [ 297.453712][ T3790] device veth1_vlan left promiscuous mode [ 297.459613][ T3790] device veth0_vlan left promiscuous mode [ 297.465908][ T3790] device veth1_macvtap left promiscuous mode [ 297.471958][ T3790] device veth0_macvtap left promiscuous mode [ 297.477990][ T3790] device veth1_vlan left promiscuous mode [ 297.483883][ T3790] device veth0_vlan left promiscuous mode [ 297.644637][ T3790] team0 (unregistering): Port device team_slave_1 removed [ 297.665802][ T3790] team0 (unregistering): Port device team_slave_0 removed [ 297.684714][ T3790] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.704057][ T3790] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.756172][ T3790] bond0 (unregistering): Released all slaves [ 297.802875][ T3790] bond1 (unregistering): Released all slaves [ 297.857055][ T3790] team0 (unregistering): Port device team_slave_1 removed [ 297.875913][ T3790] team0 (unregistering): Port device team_slave_0 removed [ 297.894397][ T3790] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.903499][ T3790] device bond_slave_1 left promiscuous mode [ 297.920260][ T3790] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.929415][ T3790] device bond_slave_0 left promiscuous mode [ 298.063529][ T3790] bond0 (unregistering): Released all slaves [ 298.904510][ T3790] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.963889][ T3790] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.031530][ T3790] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.072399][ T3790] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.135991][ T3790] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.146480][ T3790] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.181840][ T3790] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.192228][ T3790] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.241966][ T3790] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.252242][ T3790] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.315967][ T3790] bond0: (slave netdevsim0): Releasing backup interface [ 299.324566][ T3790] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.334945][ T3790] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.385962][ T3790] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.452062][ T3790] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.521540][ T3790] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.581602][ T3790] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.447231][ T3790] device hsr_slave_0 left promiscuous mode [ 300.453494][ T3790] device hsr_slave_1 left promiscuous mode [ 300.460092][ T3790] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.467475][ T3790] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.474972][ T3790] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.482993][ T3790] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.491885][ T3790] device bridge_slave_1 left promiscuous mode [ 300.498011][ T3790] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.505913][ T3790] device bridge_slave_0 left promiscuous mode [ 300.512233][ T3790] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.522236][ T3790] device hsr_slave_0 left promiscuous mode [ 300.528329][ T3790] device hsr_slave_1 left promiscuous mode [ 300.536339][ T3790] device hsr_slave_0 left promiscuous mode [ 300.542733][ T3790] device hsr_slave_1 left promiscuous mode [ 300.548803][ T3790] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.556247][ T3790] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.563710][ T3790] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.571157][ T3790] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.578525][ T3790] device bridge_slave_1 left promiscuous mode [ 300.584757][ T3790] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.592499][ T3790] device bridge_slave_0 left promiscuous mode [ 300.598613][ T3790] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.609951][ T3790] device veth1_macvtap left promiscuous mode [ 300.615962][ T3790] device veth0_macvtap left promiscuous mode [ 300.622075][ T3790] device veth1_vlan left promiscuous mode [ 300.627829][ T3790] device veth0_vlan left promiscuous mode [ 300.634386][ T3790] device veth1_macvtap left promiscuous mode [ 300.640421][ T3790] device veth0_macvtap left promiscuous mode [ 300.646442][ T3790] device veth1_vlan left promiscuous mode [ 300.652476][ T3790] device veth0_vlan left promiscuous mode [ 300.658686][ T3790] device veth1_macvtap left promiscuous mode [ 300.664895][ T3790] device veth0_macvtap left promiscuous mode [ 300.670967][ T3790] device veth1_vlan left promiscuous mode [ 300.676703][ T3790] device veth0_vlan left promiscuous mode [ 300.873592][ T3790] team0 (unregistering): Port device team_slave_1 removed [ 300.892181][ T3790] team0 (unregistering): Port device team_slave_0 removed [ 300.911168][ T3790] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 300.922479][ T3790] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 300.962120][ T3790] bond0 (unregistering): Released all slaves [ 301.286713][ T3790] bond0 (unregistering): Released all slaves [ 301.390344][ T3790] team0 (unregistering): Port device team_slave_1 removed [ 301.408164][ T3790] team0 (unregistering): Port device team_slave_0 removed [ 301.426210][ T3790] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 301.446781][ T3790] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 301.486363][ T3790] bond0 (unregistering): Released all slaves