last executing test programs: 5m8.343683557s ago: executing program 3 (id=490): setns(0xc9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r1, &(0x7f00000002c0)=""/102392, 0x18ff8) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000019600)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f00000196c0)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) 5m6.925127781s ago: executing program 3 (id=492): bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@abs, 0x6e) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000440), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x6) socket$key(0xf, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000680)={0x1f, 0xffff, 0x3}, 0x3d) write(r2, 0x0, 0x0) 4m58.406240283s ago: executing program 3 (id=502): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x22020600) 4m57.000631446s ago: executing program 3 (id=503): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x800001000089}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0x40082104, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x6) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x8031, 0xffffffffffffffff, 0xb2e45000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r2, &(0x7f0000001500)=""/102368, 0x18fe0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000440), 0x11000) vmsplice(r3, &(0x7f0000000480)=[{&(0x7f00000004c0), 0x3528a9c0}], 0x1, 0x0) 4m54.339649475s ago: executing program 3 (id=507): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x59) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x2, 0x8000) ioctl$EVIOCSREP(r1, 0x40084503, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x181000, 0x0) ioctl$RTC_ALM_SET(r5, 0x40247007, &(0x7f00000000c0)={0x2a, 0x1, 0x1, 0x1b, 0x1, 0x8, 0x3, 0x6f, 0x1}) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) r6 = syz_open_procfs(0x0, 0x0) sendfile(r6, r6, 0x0, 0x2000007ff) socketpair$unix(0x1, 0x5, 0x0, 0x0) 4m49.95167266s ago: executing program 3 (id=512): r0 = syz_open_dev$video(&(0x7f0000000180), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x1, 0x2, 0x2}) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./security\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./security\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000300)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000440)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000540), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000580), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000005c0)=0x6) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x14, 0x2, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) write(0xffffffffffffffff, &(0x7f0000000300), 0x0) write(0xffffffffffffffff, &(0x7f0000000340)='appraise func=POLICY_CHEC', 0x19) close(0xffffffffffffffff) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000200)=@userptr={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0xff}, 0x0, 0x2, {0x0}, 0x400000}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f00000003c0)=0x2) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000400)=0x1) 4m33.294765173s ago: executing program 32 (id=512): r0 = syz_open_dev$video(&(0x7f0000000180), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x1, 0x2, 0x2}) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./security\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./security\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000300)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000440)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000540), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000580), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000005c0)=0x6) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x14, 0x2, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) write(0xffffffffffffffff, &(0x7f0000000300), 0x0) write(0xffffffffffffffff, &(0x7f0000000340)='appraise func=POLICY_CHEC', 0x19) close(0xffffffffffffffff) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000200)=@userptr={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0xff}, 0x0, 0x2, {0x0}, 0x400000}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f00000003c0)=0x2) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000400)=0x1) 1m30.259670793s ago: executing program 1 (id=832): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x800001000089}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000300)={0x0, 0x0}) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0x40082104, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x6) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x8031, 0xffffffffffffffff, 0xb2e45000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r2, &(0x7f0000001500)=""/102368, 0x18fe0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000440), 0x11000) vmsplice(r3, &(0x7f0000000480), 0x0, 0x0) 1m28.668225915s ago: executing program 1 (id=837): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}}, 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000001340)='./debug\x00', &(0x7f0000001380)='debugfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000013c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001400)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000001440)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001480)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001580), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000001600)=0x2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001980)=@deltfilter={0x24, 0x2d, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xc}}}, 0x24}}, 0x4004004) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000019c0)=@assoc_value, &(0x7f0000001a00)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000001a40)='.\x00', 0xfffffffb) sendto$inet6(0xffffffffffffffff, &(0x7f0000001a80)='X', 0x34000, 0x0, &(0x7f0000001ac0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mount(&(0x7f0000001b00)=@nullb, &(0x7f0000001b40)='./cgroup\x00', &(0x7f0000001b80)='qnx4\x00', 0x200000, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 1m28.060370827s ago: executing program 1 (id=838): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000600)={'vcan0\x00'}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000700)={'vcan0\x00', 0x0}) read(r0, &(0x7f0000000940)=""/4096, 0x1000) sendmsg$nl_route_sched(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r2, {0x6, 0xc}, {0x5, 0x10}, {0x6, 0xc}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 1m25.494387948s ago: executing program 1 (id=842): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$SNDCTL_TMR_TEMPO(0xffffffffffffffff, 0xc0045405, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_flash={0x33, 0x7, './file0\x00'}}) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000012c0)='net/packet\x00') mkdirat(0xffffffffffffffff, 0x0, 0x36) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000600)={'pcl816\x00', [0x140, 0x2, 0x3, 0x5, 0x2, 0x10000, 0x7ffd, 0x6, 0x1007, 0xc72d, 0x4, 0x10, 0xadd2, 0x8, 0x4ce, 0x9e9b, 0x101, 0x2, 0x6, 0x8, 0x4, 0x0, 0xa, 0x9, 0xffd, 0x200000, 0xaf, 0x0, 0x9, 0x0, 0x4]}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'vxcan0\x00'}) 1m22.686705383s ago: executing program 1 (id=848): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(&(0x7f0000000180)='asymmetric\x00', 0x0, &(0x7f0000000340)="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", 0x114, 0xfffffffffffffffe) 1m20.188050327s ago: executing program 1 (id=851): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x188}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00'], 0x8, 0x105c2, &(0x7f0000003780)="$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") truncate(&(0x7f0000013e00)='./file1\x00', 0x81) 1m4.608882331s ago: executing program 33 (id=851): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x188}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00'], 0x8, 0x105c2, &(0x7f0000003780)="$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") truncate(&(0x7f0000013e00)='./file1\x00', 0x81) 19.056484383s ago: executing program 4 (id=961): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}}, 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000001340)='./debug\x00', &(0x7f0000001380)='debugfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000013c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001400)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000001440)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001480)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000001580), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000001600)=0x2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001940)={0x0}}, 0x4004004) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000019c0)=@assoc_value, &(0x7f0000001a00)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000001a40)='.\x00', 0xfffffffb) sendto$inet6(0xffffffffffffffff, &(0x7f0000001a80)='X', 0x34000, 0x0, &(0x7f0000001ac0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mount(&(0x7f0000001b00)=@nullb, &(0x7f0000001b40)='./cgroup\x00', &(0x7f0000001b80)='qnx4\x00', 0x200000, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 17.920131468s ago: executing program 4 (id=965): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000000070500000000000000000005000002090001007379"], 0x20}, 0x1, 0x0, 0x0, 0x4000019}, 0x8080) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x80) 17.11094728s ago: executing program 4 (id=967): syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000100), &(0x7f0000000080), &(0x7f0000000000)) pipe(0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nullb/nullb1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='1\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/memory_backed\x00', 0x1, 0x0) write(r3, &(0x7f0000000240), 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)='1\n', 0x2) 16.403245832s ago: executing program 2 (id=968): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'lo\x00'}) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) 16.073839086s ago: executing program 4 (id=969): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000340)=0x400000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000380)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019840)=""/102400, 0x19000) sched_setaffinity(r2, 0x47, &(0x7f0000019780)=0x7) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/apparmor/.load\x00', 0x1, 0x0) write(r4, &(0x7f0000000100)="04080076657273696f6e00020500000004080070726f66696c6500070502007000040600666c6167730007020000000002000000000200000000080200000000020000000002000000000200000000", 0x4f) mkdir(&(0x7f0000000180)='./cgroup/../file0\x00', 0x8) 13.789447098s ago: executing program 4 (id=970): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000000140)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000019180)={'wlan0\x00'}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 13.629548524s ago: executing program 5 (id=971): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r3, 0x4068aea3, &(0x7f00000004c0)={0xed, 0x0, 0x4}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl(r1, 0x3b8c, &(0x7f0000000280)="100d2bbf365b26902c33c9d6ff61819ac8528f8472aa9f010e4da89271db538df0ba") socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x22008010) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x41, 0x0) syz_clone(0x211, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = dup(r5) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r7, &(0x7f0000000380)="1100000010000300"/22, 0x16) write$P9_RSTATFS(r6, &(0x7f0000000140)={0x43, 0x9, 0x1, {0x569142f7, 0x0, 0x7fff, 0x5, 0x1, 0x5, 0x7, 0x200, 0x6}}, 0x43) ioctl$TCSETS(r5, 0x40045431, &(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) r8 = syz_open_pts(r5, 0x80) dup3(r8, r5, 0x80000) ioctl$TCSETSW2(r8, 0x402c542c, &(0x7f0000000240)={0x40001000, 0x6, 0x5, 0xf8000001, 0x5, "73893a000062f0fd00000000000000710de6eb", 0x10000000, 0xfffffffa}) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r9) 13.567383451s ago: executing program 2 (id=972): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000002c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r3, &(0x7f0000000380)=""/102392, 0x18ff8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0x0}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000080)={0x17, 0x88, 0xfa00, {0x0, 0x10, 0x0, @in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0x14}}}}, 0x90) 12.536292665s ago: executing program 5 (id=974): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$SNDCTL_TMR_TEMPO(0xffffffffffffffff, 0xc0045405, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_flash={0x33, 0x7, './file0\x00'}}) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000012c0)='net/packet\x00') mkdirat(0xffffffffffffffff, 0x0, 0x36) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000600)={'pcl816\x00', [0x140, 0x2, 0x3, 0x5, 0x2, 0x10000, 0x7ffd, 0x6, 0x1007, 0xc72d, 0x4, 0x10, 0xadd2, 0x8, 0x4ce, 0x9e9b, 0x101, 0x2, 0x6, 0x8, 0x4, 0x0, 0xa, 0x9, 0xffd, 0x200000, 0xaf, 0x0, 0x9, 0x0, 0x4]}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'vxcan0\x00'}) 11.039412868s ago: executing program 5 (id=978): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000040)={0x2000, 0x101, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) close_range(r1, 0xffffffffffffffff, 0x0) 9.846057589s ago: executing program 2 (id=980): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'lo\x00'}) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) 9.354476319s ago: executing program 5 (id=981): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000340)=0x400000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000380)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019840)=""/102400, 0x19000) sched_setaffinity(r2, 0x47, &(0x7f0000019780)=0x7) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/apparmor/.load\x00', 0x1, 0x0) write(r4, &(0x7f0000000100)="04080076657273696f6e00020500000004080070726f66696c6500070502007000040600666c6167730007020000000002000000000200000000080200000000020000000002000000000200000000", 0x4f) mkdir(&(0x7f0000000180)='./cgroup/../file0\x00', 0x8) 9.190107586s ago: executing program 0 (id=982): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r3, 0x4068aea3, &(0x7f00000004c0)={0xed, 0x0, 0x4}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl(r1, 0x3b8c, &(0x7f0000000280)="100d2bbf365b26902c33c9d6ff61819ac8528f8472aa9f010e4da89271db538df0ba") socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x22008010) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x41, 0x0) syz_clone(0x211, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = dup(r5) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r7, &(0x7f0000000380)="1100000010000300"/22, 0x16) write$P9_RSTATFS(r6, &(0x7f0000000140)={0x43, 0x9, 0x1, {0x569142f7, 0x0, 0x7fff, 0x5, 0x1, 0x5, 0x7, 0x200, 0x6}}, 0x43) ioctl$TCSETS(r5, 0x40045431, &(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) r8 = syz_open_pts(r5, 0x80) dup3(r8, r5, 0x80000) ioctl$TCSETSW2(r8, 0x402c542c, &(0x7f0000000240)={0x40001000, 0x6, 0x5, 0xf8000001, 0x5, "73893a000062f0fd00000000000000710de6eb", 0x10000000, 0xfffffffa}) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r9) 7.485428149s ago: executing program 5 (id=983): socket$inet6(0xa, 0x3, 0x1) unshare(0x6020400) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x1c3902, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x101101) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0xb, 0x4, 0x20e951, 0x4, '\x00', 0x7}, 0x0, [0x96, 0x8000000041, 0x97ab, 0xfffc000000000000, 0xb3, 0x5, 0x0, 0xc71, 0xfffffffffffffff1, 0x7f, 0xcc46, 0x1, 0x10, 0x6652, 0x0, 0x5, 0x4, 0x100, 0x80000000, 0x830e, 0x4, 0xa, 0x6, 0xaf5f, 0x7, 0x7ff, 0xe0c, 0x4, 0x1, 0xfffffffffffffffd, 0x0, 0x7, 0x5, 0x200, 0x9, 0x0, 0x5, 0x5, 0x5, 0x1, 0x400000000000004, 0x7, 0xf23, 0x2, 0x1, 0x3, 0x20f68be3, 0x1, 0x9, 0x0, 0x1ff, 0x2811, 0x6, 0x8000000000000001, 0x9, 0xff, 0xb, 0x1, 0x101, 0xffffffff, 0x9, 0x100000001, 0xa, 0x3, 0x6, 0x2c5, 0x240000000000001, 0x4, 0x2, 0x3, 0x9, 0x800, 0x8, 0x3, 0x2, 0x7ff7ffffffffffff, 0x1, 0x60000003, 0x2, 0x3, 0x5, 0x100000000, 0xff, 0xa88, 0x7fff, 0x6, 0xfffffffffffffff5, 0x8, 0x4b5f7dc4, 0x1000000000000000, 0xf3c, 0x1, 0x101, 0x106, 0x2, 0x4, 0x2, 0xffff, 0x6, 0x8, 0x0, 0x10000, 0x72, 0x5, 0xb, 0x4, 0x3, 0x2004, 0x20000000002, 0x5, 0xffffffff, 0x7, 0x100000000, 0x4, 0xff, 0x4, 0x10, 0x100000000000008, 0x100000000, 0xfffffffeffffffff, 0x7fffffffffffffff, 0x7fffffffffffffff, 0x0, 0xc84a, 0x4, 0x2, 0x0, 0x7]}) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000680)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000006c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000700), 0x0, 0x0) read$msr(r4, &(0x7f0000000740)=""/102392, 0x18ff8) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000019740)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000019780)='./tracing\x00', &(0x7f00000197c0)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000019800)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r6, &(0x7f0000019840)='e:my_read_msr1 m_r/r', 0x14) 7.27961069s ago: executing program 2 (id=984): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000000070500000000000000000005000002090001007379"], 0x20}, 0x1, 0x0, 0x0, 0x4000019}, 0x8080) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x80) 5.517986629s ago: executing program 4 (id=985): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r3 = socket(0x10, 0x803, 0x0) r4 = syz_io_uring_setup(0xefd, &(0x7f00000000c0)={0x0, 0x0, 0x10000, 0x1, 0x55}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0) sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c015}, 0xc000) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000400)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x80010182, 0x1}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={{0x14}, [], {0x14}}, 0x28}}, 0x0) io_uring_enter(r4, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) close(0xffffffffffffffff) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r9, 0x401c5820, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffd}) connect$inet(r8, &(0x7f0000000700)={0x2, 0x4e22, @local}, 0x10) 5.358573655s ago: executing program 2 (id=986): r0 = openat(0xffffffffffffff9c, &(0x7f0000019800)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r0, &(0x7f0000019840)='e:my_read_msr1 m_r/r', 0x14) openat(r0, 0x0, 0x422002, 0x48) 5.271548584s ago: executing program 0 (id=987): syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000100), &(0x7f0000000080), &(0x7f0000000000)) pipe(0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nullb/nullb1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/memory_backed\x00', 0x1, 0x0) write(r2, &(0x7f0000000240), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1\n', 0x2) 5.169547915s ago: executing program 2 (id=988): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) 5.074188034s ago: executing program 0 (id=989): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000040)={0x2000, 0x101, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) close_range(r1, 0xffffffffffffffff, 0x0) 4.765482455s ago: executing program 0 (id=990): syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000100), &(0x7f0000000080), &(0x7f0000000000)) pipe(0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nullb/nullb1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='1\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/memory_backed\x00', 0x1, 0x0) write(r3, &(0x7f0000000240), 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)='1\n', 0x2) 3.63961131s ago: executing program 0 (id=991): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000340)=0x400000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000380)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019840)=""/102400, 0x19000) sched_setaffinity(r2, 0x47, &(0x7f0000019780)=0x7) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/apparmor/.load\x00', 0x1, 0x0) write(r4, &(0x7f0000000100)="04080076657273696f6e00020500000004080070726f66696c6500070502007000040600666c6167730007020000000002000000000200000000080200000000020000000002000000000200000000", 0x4f) mkdir(&(0x7f0000000180)='./cgroup/../file0\x00', 0x8) 1.847715262s ago: executing program 0 (id=992): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'lo\x00'}) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) 0s ago: executing program 5 (id=993): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) kernel console output (not intermixed with test programs): 96.415324][ T5894] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 96.423977][ T5891] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 96.439551][ T5887] ati_remote 2-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 96.460844][ T5889] mos7720 1-1:1.0: Moschip 2 port adapter converter detected [ 96.479167][ T770] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.517731][ T770] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.570238][ T5100] Bluetooth: hci0: command tx timeout [ 96.648517][ T5100] Bluetooth: hci1: command tx timeout [ 96.667473][ T5889] usb 1-1: mos7720: usb_control_msg() failed: -71 [ 96.703080][ T5889] usb 1-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 96.724838][ T5889] usb 1-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 96.733709][ T5100] Bluetooth: hci2: command tx timeout [ 96.758256][ C0] usb 1-1: mos7720_interrupt_callback - Error -19 submitting control urb [ 96.768292][ T5889] usb 1-1: USB disconnect, device number 2 [ 96.827047][ T5889] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 96.844399][ T5889] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 96.869772][ T5889] mos7720 1-1:1.0: device disconnected [ 96.887651][ T5864] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 96.907238][ T5100] Bluetooth: hci3: command tx timeout [ 96.976291][ T5893] usb 2-1: USB disconnect, device number 2 [ 97.473652][ T972] cfg80211: failed to load regulatory.db [ 97.846562][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.859765][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.870215][ T5864] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 97.879522][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.902071][ T5864] usb 4-1: config 0 descriptor?? [ 98.430401][ T5864] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 98.445488][ T5864] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 98.452937][ T5864] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 98.460949][ T5864] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 98.468389][ T5864] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 98.503677][ T5922] syz.1.9 (5922): drop_caches: 0 [ 99.367068][ T5864] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 99.381531][ T5864] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 99.408273][ T5864] pyra 0003:1E7D:2CF6.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 99.643118][ T5864] pyra 0003:1E7D:2CF6.0001: couldn't init struct pyra_device [ 99.677138][ T5864] pyra 0003:1E7D:2CF6.0001: couldn't install mouse [ 99.709305][ T5864] pyra: probe of 0003:1E7D:2CF6.0001 failed with error -71 [ 100.019233][ T5930] Bluetooth: MGMT ver 1.22 [ 100.249291][ T5930] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 100.957068][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 101.720074][ T5864] usb 4-1: USB disconnect, device number 2 [ 101.909712][ T5925] fido_id[5925]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 102.337087][ T5864] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 103.291657][ T5864] usb 4-1: Using ep0 maxpacket: 32 [ 103.303326][ T5864] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 103.333550][ T5864] usb 4-1: config 0 has no interface number 0 [ 103.371947][ T5864] usb 4-1: config 0 interface 12 has no altsetting 0 [ 103.439528][ T5864] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 103.452543][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.463602][ T5864] usb 4-1: Product: syz [ 103.471759][ T5864] usb 4-1: Manufacturer: syz [ 103.476554][ T5864] usb 4-1: SerialNumber: syz [ 103.491924][ T5864] usb 4-1: config 0 descriptor?? [ 103.787841][ T5956] syzkaller0: entered promiscuous mode [ 103.793412][ T5956] syzkaller0: entered allmulticast mode [ 103.897148][ T5887] rxe_eth0 speed is unknown, defaulting to 1000 [ 103.967397][ T5864] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 103.983641][ T5864] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 104.004283][ T5864] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 104.022208][ T5864] f81534: probe of 4-1:0.12 failed with error -71 [ 104.051164][ T5864] usb 4-1: USB disconnect, device number 3 [ 110.869986][ T6013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.39'. [ 111.493610][ T6031] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 113.187756][ T6048] process 'syz.3.48' launched './file0' with NULL argv: empty string added [ 113.757621][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 114.167286][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 114.374351][ T6042] ip_tables: iptables: counters copy to user failed while replacing table [ 114.419102][ T6042] netlink: 32 bytes leftover after parsing attributes in process `syz.2.47'. [ 114.895716][ T6061] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 114.922407][ T6061] CIFS: Unable to determine destination address [ 114.935531][ T6061] syz.0.50[6061]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 114.980796][ T6061] loop0: detected capacity change from 0 to 256 [ 115.215161][ T6061] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 116.667995][ T6071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.53'. [ 118.312298][ T6104] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 120.064382][ T6102] loop2: detected capacity change from 0 to 4096 [ 120.178309][ T6111] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 123.832927][ T6136] qnx4: no qnx4 filesystem (no root dir). [ 124.743512][ T6142] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 129.277046][ T6126] netlink: 4 bytes leftover after parsing attributes in process `syz.3.65'. [ 129.395040][ T6166] loop1: detected capacity change from 0 to 512 [ 129.459723][ T6166] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 129.576723][ T6170] loop2: detected capacity change from 0 to 4096 [ 129.584497][ T6170] EXT4-fs: Invalid want_extra_isize 9 [ 129.609287][ T6166] EXT4-fs (loop1): 1 truncate cleaned up [ 129.687630][ T6166] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.432976][ T6175] loop2: detected capacity change from 0 to 1024 [ 130.441258][ T6175] hfsplus: umask requires a value [ 130.446514][ T6175] hfsplus: unable to parse mount options [ 130.541208][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.847078][ T28] audit: type=1326 audit(1793942402.914:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.1.76" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79df9fb19 code=0x7ffc0000 [ 133.666987][ T28] audit: type=1326 audit(1793942402.914:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.1.76" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79df9fb19 code=0x7ffc0000 [ 133.693576][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.700286][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.782120][ T28] audit: type=1326 audit(1793942402.924:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.1.76" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79df9fb19 code=0x7ffc0000 [ 133.856747][ T28] audit: type=1326 audit(1793942402.924:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.1.76" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79df9fb19 code=0x7ffc0000 [ 133.859013][ T6199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.80'. [ 133.901764][ T28] audit: type=1326 audit(1793942402.974:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.1.76" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fd79df9fb19 code=0x7ffc0000 [ 133.984602][ T28] audit: type=1326 audit(1793942402.974:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.1.76" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79df9fb19 code=0x7ffc0000 [ 134.092745][ T28] audit: type=1326 audit(1793942402.974:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.1.76" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79df9fb19 code=0x7ffc0000 [ 134.177417][ T28] audit: type=1326 audit(1793942402.974:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.1.76" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd79df9fb19 code=0x7ffc0000 [ 134.235156][ T28] audit: type=1326 audit(1793942402.974:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.1.76" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd79df9fb19 code=0x7ffc0000 [ 135.174742][ T6207] loop2: detected capacity change from 0 to 32768 [ 135.218700][ T6207] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.84 (6207) [ 135.562713][ T6207] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 135.589778][ T6207] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 135.607162][ T6207] BTRFS info (device loop2): using free space tree [ 135.917020][ T6216] loop0: detected capacity change from 0 to 32768 [ 136.004089][ T6216] [ 136.004089][ T6216] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 136.004089][ T6216] [ 136.100696][ T6216] ERROR: (device loop0): diWrite: ixpxd invalid [ 136.100696][ T6216] [ 136.110011][ T6207] BTRFS info (device loop2): enabling ssd optimizations [ 136.119491][ T6216] ERROR: (device loop0): txCommit: [ 136.119491][ T6216] [ 136.147295][ T6216] ERROR: (device loop0): dtSearch: stack overrun! [ 136.147295][ T6216] [ 136.155998][ T6216] btstack dump: [ 136.157397][ T6207] BTRFS info (device loop2): auto enabling async discard [ 136.159875][ T6216] bn = 0, index = 0 [ 136.170482][ T6216] bn = 0, index = 0 [ 136.174386][ T6216] bn = 0, index = 0 [ 136.178444][ T6216] bn = 0, index = 0 [ 136.183591][ T6216] bn = 0, index = 0 [ 136.187511][ T6216] bn = 0, index = 0 [ 136.191366][ T6216] bn = 0, index = 0 [ 136.195212][ T6216] bn = 0, index = 0 [ 136.249491][ T6216] ERROR: (device loop0): dtSearch: stack overrun! [ 136.249491][ T6216] [ 136.258588][ T6216] btstack dump: [ 136.262881][ T6216] bn = 0, index = 0 [ 136.266748][ T6216] bn = 0, index = 0 [ 136.270788][ T6216] bn = 0, index = 0 [ 136.274645][ T6216] bn = 0, index = 0 [ 136.278596][ T6216] bn = 0, index = 0 [ 136.282465][ T6216] bn = 0, index = 0 [ 136.287493][ T6216] bn = 0, index = 0 [ 136.291355][ T6216] bn = 0, index = 0 [ 136.295286][ T6216] jfs_lookup: dtSearch returned -5 [ 136.342657][ T6209] loop1: detected capacity change from 0 to 40427 [ 136.364173][ T6209] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 136.372562][ T5793] [ 136.372562][ T5793] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 136.372562][ T5793] [ 136.417040][ T6209] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 136.422923][ T5793] [ 136.422923][ T5793] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 136.422923][ T5793] [ 136.464530][ T6209] F2FS-fs (loop1): invalid crc value [ 136.569437][ T6209] F2FS-fs (loop1): Found nat_bits in checkpoint [ 136.917002][ T6209] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 136.924400][ T6209] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 137.000780][ T5791] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 137.930282][ T6250] loop1: detected capacity change from 0 to 256 [ 138.135712][ T6250] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 256) [ 138.541779][ T6256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.91'. [ 138.897778][ T6262] netlink: 'syz.1.93': attribute type 4 has an invalid length. [ 138.915910][ T6262] netlink: 17 bytes leftover after parsing attributes in process `syz.1.93'. [ 139.280082][ T6262] FAULT_INJECTION: forcing a failure. [ 139.280082][ T6262] name failslab, interval 1, probability 0, space 0, times 1 [ 139.458008][ T6262] CPU: 0 PID: 6262 Comm: syz.1.93 Not tainted syzkaller #0 [ 139.465309][ T6262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 139.475450][ T6262] Call Trace: [ 139.478777][ T6262] [ 139.481748][ T6262] dump_stack_lvl+0x18c/0x250 [ 139.486528][ T6262] ? show_regs_print_info+0x20/0x20 [ 139.491791][ T6262] ? load_image+0x420/0x420 [ 139.496340][ T6262] ? __lock_acquire+0x7eb0/0x7eb0 [ 139.501390][ T6262] ? lockdep_hardirqs_on+0x98/0x150 [ 139.506627][ T6262] should_fail_ex+0x394/0x4c0 [ 139.511357][ T6262] should_failslab+0x9/0x20 [ 139.515924][ T6262] slab_pre_alloc_hook+0x59/0x300 [ 139.520986][ T6262] kmem_cache_alloc+0x5a/0x2d0 [ 139.525783][ T6262] ? fib_trie_unmerge+0x26a/0xcf0 [ 139.530850][ T6262] fib_trie_unmerge+0x26a/0xcf0 [ 139.535751][ T6262] fib_unmerge+0xc0/0x350 [ 139.540122][ T6262] fib4_rule_configure+0x118/0xaf0 [ 139.545271][ T6262] fib_nl_newrule+0x135e/0x1e40 [ 139.550184][ T6262] ? fib_rules_seq_read+0xf0/0xf0 [ 139.555268][ T6262] ? rcu_is_watching+0x15/0xb0 [ 139.560069][ T6262] ? trace_contention_end+0x39/0xe0 [ 139.565414][ T6262] ? fib_rules_seq_read+0xf0/0xf0 [ 139.570487][ T6262] rtnetlink_rcv_msg+0x843/0xf90 [ 139.575464][ T6262] ? rtnetlink_rcv_msg+0x220/0xf90 [ 139.580615][ T6262] ? rtnetlink_bind+0x80/0x80 [ 139.585325][ T6262] ? kasan_quarantine_put+0xd8/0x220 [ 139.590653][ T6262] ? lockdep_hardirqs_on+0x98/0x150 [ 139.595886][ T6262] ? slab_free_freelist_hook+0x154/0x240 [ 139.601558][ T6262] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 139.607573][ T6262] ? lock_chain_count+0x20/0x20 [ 139.612460][ T6262] ? __local_bh_enable_ip+0x13a/0x1c0 [ 139.617863][ T6262] ? lockdep_hardirqs_on+0x98/0x150 [ 139.623090][ T6262] ? __local_bh_enable_ip+0x13a/0x1c0 [ 139.628495][ T6262] ? _local_bh_enable+0xa0/0xa0 [ 139.633390][ T6262] ? __dev_queue_xmit+0x1481/0x3a30 [ 139.638622][ T6262] ? __dev_queue_xmit+0x6d1/0x3a30 [ 139.643776][ T6262] ? ref_tracker_free+0x686/0x830 [ 139.648849][ T6262] netlink_rcv_skb+0x235/0x4c0 [ 139.653656][ T6262] ? rtnetlink_bind+0x80/0x80 [ 139.658369][ T6262] ? netlink_ack+0x1160/0x1160 [ 139.663193][ T6262] ? __lock_acquire+0x7eb0/0x7eb0 [ 139.668293][ T6262] ? netlink_deliver_tap+0x2e/0x1b0 [ 139.673562][ T6262] netlink_unicast+0x856/0x9e0 [ 139.678384][ T6262] netlink_sendmsg+0x8d0/0xbf0 [ 139.683183][ T6262] ? netlink_getsockopt+0x590/0x590 [ 139.688417][ T6262] ? apparmor_socket_sendmsg+0x8e/0x330 [ 139.694012][ T6262] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 139.699349][ T6262] ? security_socket_sendmsg+0x80/0xa0 [ 139.704856][ T6262] ? netlink_getsockopt+0x590/0x590 [ 139.710087][ T6262] ____sys_sendmsg+0x61b/0x980 [ 139.714891][ T6262] ? __asan_memset+0x22/0x40 [ 139.719518][ T6262] ? __sys_sendmsg_sock+0x30/0x30 [ 139.724577][ T6262] ? __import_iovec+0x5f2/0x850 [ 139.729471][ T6262] ? import_iovec+0x73/0xa0 [ 139.734015][ T6262] ___sys_sendmsg+0x2a6/0x360 [ 139.738738][ T6262] ? __sys_sendmsg+0x2b0/0x2b0 [ 139.743665][ T6262] __se_sys_sendmsg+0x1d0/0x2c0 [ 139.748554][ T6262] ? __x64_sys_sendmsg+0x80/0x80 [ 139.753534][ T6262] ? lockdep_hardirqs_on+0x98/0x150 [ 139.758761][ T6262] do_syscall_64+0x55/0xb0 [ 139.763207][ T6262] ? clear_bhb_loop+0x40/0x90 [ 139.767921][ T6262] ? clear_bhb_loop+0x40/0x90 [ 139.772641][ T6262] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 139.778592][ T6262] RIP: 0033:0x7fd79df9fb19 [ 139.783042][ T6262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.802684][ T6262] RSP: 002b:00007fd79ee5c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.811129][ T6262] RAX: ffffffffffffffda RBX: 00007fd79e225fa0 RCX: 00007fd79df9fb19 [ 139.819134][ T6262] RDX: 0000000000040000 RSI: 0000200000000480 RDI: 0000000000000004 [ 139.827132][ T6262] RBP: 00007fd79e037b70 R08: 0000000000000000 R09: 0000000000000000 [ 139.835135][ T6262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.843131][ T6262] R13: 00007fd79e226038 R14: 00007fd79e225fa0 R15: 00007ffdd60342f8 [ 139.851168][ T6262] [ 140.386322][ T6269] qnx4: no qnx4 filesystem (no root dir). [ 141.250300][ T6260] loop2: detected capacity change from 0 to 32768 [ 141.611845][ T6260] XFS (loop2): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 142.363685][ T6260] XFS (loop2): Starting recovery (logdev: internal) [ 142.530332][ T56] XFS (loop2): Metadata CRC error detected at xfs_refcountbt_read_verify+0x42/0xd0, xfs_refcountbt block 0x18 [ 142.817687][ T56] XFS (loop2): Unmount and run xfs_repair [ 142.823512][ T56] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 142.831324][ T56] 00000000: 52 33 46 43 00 00 00 00 08 00 ff ff ff ff ff ff R3FC............ [ 142.843912][ T56] 00000010: 00 00 00 00 00 00 00 18 00 00 00 00 00 00 00 00 ................ [ 142.863260][ T56] 00000020: ed 37 bf 6e 74 ea 4e 01 af ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 142.905166][ T56] 00000030: 00 00 00 00 c6 ff 54 f6 00 00 00 00 00 00 00 00 ......T......... [ 142.947379][ T56] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 142.966228][ T56] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 143.018603][ T56] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 143.077240][ T56] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 143.097321][ T6260] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x18 len 4 error 74 [ 143.127232][ T6260] XFS (loop2): Failed to recover leftover CoW staging extents, err -117. [ 143.135765][ T6260] XFS (loop2): Filesystem has been shut down due to log error (0x2). [ 143.167088][ T6260] XFS (loop2): Please unmount the filesystem and rectify the problem(s). [ 143.176639][ T6260] XFS (loop2): Ending recovery (logdev: internal) [ 143.218478][ T6260] XFS (loop2): Error -5 reserving per-AG metadata reserve pool. [ 144.207842][ T6293] netlink: 4 bytes leftover after parsing attributes in process `syz.3.101'. [ 145.351819][ T6307] qnx4: no qnx4 filesystem (no root dir). [ 146.352510][ T6295] ip_tables: iptables: counters copy to user failed while replacing table [ 146.386333][ T6312] loop2: detected capacity change from 0 to 760 [ 147.677103][ T5889] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 147.935453][ T5889] usb 2-1: config 4 has an invalid interface number: 44 but max is 0 [ 147.955328][ T5889] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 148.000928][ T5889] usb 2-1: config 4 has no interface number 0 [ 148.021602][ T5889] usb 2-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 148.050569][ T5889] usb 2-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 148.060439][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.075861][ T5889] usb 2-1: Product: syz [ 148.083551][ T5889] usb 2-1: Manufacturer: syz [ 148.088772][ T5889] usb 2-1: SerialNumber: syz [ 148.947588][ T6326] block nbd0: server does not support multiple connections per device. [ 148.969778][ T5889] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 149.003548][ T6326] block nbd0: shutting down sockets [ 149.025922][ T5889] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 149.086232][ T5889] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 149.196975][ T5889] usb 2-1: media controller created [ 149.259974][ T5889] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 149.693709][ T5889] DVB: Unable to find symbol dib7000p_attach() [ 149.740429][ T5889] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 150.677223][ T5889] rc_core: IR keymap rc-dib0700-rc5 not found [ 150.683421][ T5889] Registered IR keymap rc-empty [ 150.719595][ T5889] dvb-usb: could not initialize remote control. [ 150.757089][ T5889] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 150.787699][ T6339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.114'. [ 150.852533][ T5889] usb 2-1: USB disconnect, device number 3 [ 150.935288][ T5889] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 152.188346][ T6351] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 152.188346][ T6351] [ 152.562085][ T6351] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 153.133219][ T6351] CIFS mount error: No usable UNC path provided in device string! [ 153.133219][ T6351] [ 153.181862][ T6351] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 155.183773][ T6381] netlink: 4 bytes leftover after parsing attributes in process `syz.3.127'. [ 157.347435][ T6395] loop0: detected capacity change from 0 to 4096 [ 157.416989][ T6395] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 157.497475][ T6395] NILFS (loop0): mounting unchecked fs [ 157.610418][ T6395] NILFS (loop0): recovery complete [ 157.662604][ T6396] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 158.851017][ T6409] qnx4: no qnx4 filesystem (no root dir). [ 158.936800][ T6391] loop3: detected capacity change from 0 to 32768 [ 159.747797][ T6391] ======================================================= [ 159.747797][ T6391] WARNING: The mand mount option has been deprecated and [ 159.747797][ T6391] and is ignored by this kernel. Remove the mand [ 159.747797][ T6391] option from the mount to silence this warning. [ 159.747797][ T6391] ======================================================= [ 159.918133][ T6391] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/loop3": -EINTR [ 160.127163][ T6417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.136'. [ 162.427367][ T6428] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 162.436773][ T6428] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 164.165288][ T6439] loop0: detected capacity change from 0 to 2048 [ 165.207455][ C0] net_ratelimit: 25 callbacks suppressed [ 165.732887][ T6439] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.752105][ T6439] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.971065][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.006153][ T6446] 0x0000000000ec-0x0000000000f2 : "" [ 166.097876][ T6446] ftl_cs: FTL header corrupt! [ 166.527040][ T5889] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 166.848767][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 166.881690][ T5889] usb 1-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 166.903844][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.948695][ T5889] usb 1-1: config 0 descriptor?? [ 166.971616][ T6451] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 167.894244][ T5889] nzxt-kraken2 0003:1E71:170E.0002: unknown main item tag 0x0 [ 167.927953][ T5889] nzxt-kraken2 0003:1E71:170E.0002: unknown main item tag 0x0 [ 167.994598][ T5889] nzxt-kraken2 0003:1E71:170E.0002: unknown main item tag 0x0 [ 168.016391][ T5889] nzxt-kraken2 0003:1E71:170E.0002: unknown main item tag 0x0 [ 168.049016][ T5889] nzxt-kraken2 0003:1E71:170E.0002: unknown main item tag 0x0 [ 168.056567][ T5889] nzxt-kraken2 0003:1E71:170E.0002: unknown main item tag 0x0 [ 168.207158][ T5889] nzxt-kraken2 0003:1E71:170E.0002: unknown main item tag 0x0 [ 168.235924][ T5889] nzxt-kraken2 0003:1E71:170E.0002: unknown main item tag 0x0 [ 168.266422][ T5889] nzxt-kraken2 0003:1E71:170E.0002: unknown main item tag 0x0 [ 168.283106][ T5889] nzxt-kraken2 0003:1E71:170E.0002: unknown main item tag 0x0 [ 168.367545][ T5889] nzxt-kraken2 0003:1E71:170E.0002: hidraw0: USB HID v7e.ff Device [HID 1e71:170e] on usb-dummy_hcd.0-1/input0 [ 168.517749][ T5889] usb 1-1: USB disconnect, device number 3 [ 168.633203][ T6465] loop3: detected capacity change from 0 to 4096 [ 168.714888][ T6461] fido_id[6461]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 168.729590][ T6465] NILFS (loop3): invalid segment: Checksum error in segment payload [ 168.758373][ T6465] NILFS (loop3): trying rollback from an earlier position [ 168.797684][ T6466] qnx4: no qnx4 filesystem (no root dir). [ 168.819836][ T6465] NILFS (loop3): recovery complete [ 168.857020][ T6469] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 168.924061][ T6468] netlink: 24 bytes leftover after parsing attributes in process `syz.1.148'. [ 169.005788][ T6465] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 4100 already freed [ 169.044909][ T6465] NILFS (loop3): nilfs_sufile_do_free: segment 9 is already clean [ 169.173177][ T6473] loop0: detected capacity change from 0 to 128 [ 169.624612][ T6475] loop3: detected capacity change from 0 to 4096 [ 169.688609][ T6475] NILFS (loop3): invalid segment: Checksum error in segment payload [ 169.726997][ T6475] NILFS (loop3): trying rollback from an earlier position [ 169.779805][ T6475] NILFS (loop3): recovery complete [ 169.786340][ T6476] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 170.067381][ T6477] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 4100 already freed [ 170.081054][ T6477] NILFS (loop3): error -2 preparing GC: cannot delete virtual blocks from DAT file [ 170.326971][ C1] net_ratelimit: 45 callbacks suppressed [ 170.907592][ T6483] X25: received unknown 00 with LCI 000 [ 171.286975][ T6487] syz.3.152 uses obsolete (PF_INET,SOCK_PACKET) [ 171.594061][ T6471] loop1: detected capacity change from 0 to 32768 [ 173.208112][ T6471] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR [ 173.221596][ T6471] (syz.1.148,6471,1):ocfs2_initialize_super:2283 ERROR: status = -12 [ 173.329636][ T6471] (syz.1.148,6471,0):ocfs2_fill_super:1178 ERROR: status = -12 [ 175.197612][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 175.377436][ C1] net_ratelimit: 26 callbacks suppressed [ 176.397678][ T6531] capability: warning: `syz.1.157' uses deprecated v2 capabilities in a way that may be insecure [ 177.756989][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 178.735152][ T6547] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.048503][ T972] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 179.194376][ T6560] qnx4: no qnx4 filesystem (no root dir). [ 180.317708][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 180.727229][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 180.849080][ T2953] net_ratelimit: 28 callbacks suppressed [ 180.908673][ T972] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 180.920490][ T972] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 180.962664][ T972] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.238804][ T972] qmi_wwan 1-1:1.0: cdc-wdm0: USB WDM device [ 181.275809][ T972] wwan wwan0: port wwan0qmi0 attached [ 181.481994][ C1] qmi_wwan 1-1:1.0: nonzero urb status received: -71 [ 181.489025][ C1] qmi_wwan 1-1:1.0: wdm_int_callback - 0 bytes [ 181.495880][ C1] qmi_wwan 1-1:1.0: nonzero urb status received: -71 [ 181.502625][ C1] qmi_wwan 1-1:1.0: wdm_int_callback - 0 bytes [ 181.517257][ C1] qmi_wwan 1-1:1.0: nonzero urb status received: -71 [ 181.524005][ C1] qmi_wwan 1-1:1.0: wdm_int_callback - 0 bytes [ 181.534429][ C1] qmi_wwan 1-1:1.0: nonzero urb status received: -71 [ 181.541141][ C1] qmi_wwan 1-1:1.0: wdm_int_callback - 0 bytes [ 181.557586][ C1] qmi_wwan 1-1:1.0: nonzero urb status received: -71 [ 181.564360][ C1] qmi_wwan 1-1:1.0: wdm_int_callback - 0 bytes [ 181.571337][ C1] qmi_wwan 1-1:1.0: nonzero urb status received: -71 [ 181.578083][ C1] qmi_wwan 1-1:1.0: wdm_int_callback - 0 bytes [ 181.584809][ C1] qmi_wwan 1-1:1.0: nonzero urb status received: -71 [ 181.591539][ C1] qmi_wwan 1-1:1.0: wdm_int_callback - 0 bytes [ 181.598129][ C1] qmi_wwan 1-1:1.0: nonzero urb status received: -71 [ 181.604869][ C1] qmi_wwan 1-1:1.0: wdm_int_callback - 0 bytes [ 181.611446][ C1] qmi_wwan 1-1:1.0: nonzero urb status received: -71 [ 181.618187][ C1] qmi_wwan 1-1:1.0: wdm_int_callback - 0 bytes [ 181.624771][ C1] qmi_wwan 1-1:1.0: nonzero urb status received: -71 [ 181.631518][ C1] qmi_wwan 1-1:1.0: wdm_int_callback - 0 bytes [ 181.686900][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 181.696080][ C1] qmi_wwan 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 181.706318][ T972] qmi_wwan 1-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.0-1, WWAN/QMI device, ea:cd:3f:a5:87:2c [ 181.727367][ T972] usb 1-1: USB disconnect, device number 4 [ 181.739603][ T972] qmi_wwan 1-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.0-1, WWAN/QMI device [ 181.974446][ T972] wwan wwan0: port wwan0qmi0 disconnected [ 182.618453][ T6573] loop2: detected capacity change from 0 to 4096 [ 182.647842][ T6576] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 182.661272][ T6573] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 182.700922][ T6573] NILFS (loop2): mounting fs with errors [ 183.697154][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 185.436969][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 186.104258][ C0] net_ratelimit: 35 callbacks suppressed [ 189.488945][ T6615] bridge0: port 3(batadv0) entered blocking state [ 189.496452][ T6615] bridge0: port 3(batadv0) entered disabled state [ 189.547667][ T6615] batadv0: entered allmulticast mode [ 189.580548][ T6615] batadv0: entered promiscuous mode [ 189.607581][ T6615] bridge0: port 3(batadv0) entered blocking state [ 189.615673][ T6615] bridge0: port 3(batadv0) entered forwarding state [ 190.018689][ T1151] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 190.028636][ T1151] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 191.074717][ T6629] qnx4: no qnx4 filesystem (no root dir). [ 191.446995][ C1] net_ratelimit: 86 callbacks suppressed [ 191.613005][ T6614] loop0: detected capacity change from 0 to 40427 [ 191.646020][ T6614] F2FS-fs (loop0): Fix alignment : internally, start(4096) end(16896) block(12288) [ 191.706220][ T6614] F2FS-fs (loop0): invalid crc value [ 191.744951][ T6614] F2FS-fs (loop0): Found nat_bits in checkpoint [ 191.959272][ T6614] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 192.035866][ T6614] F2FS-fs (loop0): Try to recover all the superblocks, ret: 0 [ 192.357534][ T5893] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 192.557098][ T5893] usb 4-1: Using ep0 maxpacket: 16 [ 192.580524][ T5893] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.607134][ T5893] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 192.658134][ T5893] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 192.681801][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.681828][ T5893] usb 4-1: Product: syz [ 192.737510][ T5893] usb 4-1: Manufacturer: syz [ 192.742156][ T5893] usb 4-1: SerialNumber: syz [ 195.638520][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.644906][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.782241][ T5893] usb 4-1: 0:2 : does not exist [ 195.844148][ T5893] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 196.016120][ T5893] usb 4-1: USB disconnect, device number 4 [ 196.118682][ T6653] udevd[6653]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 196.214759][ T6660] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 196.566913][ C1] net_ratelimit: 29 callbacks suppressed [ 196.688618][ T5893] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 196.942939][ T5893] usb 4-1: config 253 has an invalid interface number: 130 but max is 0 [ 196.951564][ T5893] usb 4-1: config 253 has no interface number 0 [ 197.054528][ T5893] usb 4-1: config 253 interface 130 has no altsetting 0 [ 197.104291][ T5893] usb 4-1: New USB device found, idVendor=1e59, idProduct=0002, bcdDevice=98.ed [ 197.158219][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.166317][ T5893] usb 4-1: Product: syz [ 197.177055][ T5893] usb 4-1: Manufacturer: syz [ 197.181744][ T5893] usb 4-1: SerialNumber: syz [ 197.965323][ T6673] netlink: 20 bytes leftover after parsing attributes in process `syz.0.200'. [ 198.049037][ T5893] dvb-usb: found a 'EvolutePC TVWay+' in warm state. [ 198.092081][ T5893] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 198.132273][ T5893] dvbdev: DVB: registering new adapter (EvolutePC TVWay+) [ 198.147127][ T5893] usb 4-1: media controller created [ 198.189496][ T6677] netlink: 12 bytes leftover after parsing attributes in process `syz.0.201'. [ 198.367615][ T5893] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 198.638374][ T5893] DVB: Unable to find symbol dib8000_attach() [ 198.652474][ T5893] dvb-usb: no frontend was attached by 'EvolutePC TVWay+' [ 200.097121][ T5893] rc_core: IR keymap rc-dib0700-nec not found [ 200.125233][ T6691] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 200.142371][ T5893] Registered IR keymap rc-empty [ 200.158206][ T5893] dvb-usb: could not initialize remote control. [ 200.196676][ T5893] dvb-usb: EvolutePC TVWay+ successfully initialized and connected. [ 200.259406][ T5893] usb 4-1: USB disconnect, device number 5 [ 200.350120][ T6697] netlink: 'syz.3.206': attribute type 3 has an invalid length. [ 200.385109][ T6697] netlink: 3 bytes leftover after parsing attributes in process `syz.3.206'. [ 200.560212][ T5893] dvb-usb: EvolutePC TVWay+ successfully deinitialized and disconnected. [ 201.696927][ C0] net_ratelimit: 31 callbacks suppressed [ 204.149079][ T6713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.209'. [ 207.366906][ C1] net_ratelimit: 34 callbacks suppressed [ 207.443778][ T6724] sd 0:0:1:0: device reset [ 209.164411][ T6732] loop2: detected capacity change from 0 to 512 [ 209.270908][ T6732] UDF-fs: bad mount option " [ 209.270908][ T6732] " or missing value [ 212.416910][ C0] net_ratelimit: 33 callbacks suppressed [ 212.567109][ T5790] Bluetooth: hci0: command 0x0406 tx timeout [ 212.574488][ T5790] Bluetooth: hci1: command 0x0406 tx timeout [ 212.581678][ T5796] Bluetooth: hci3: command 0x0406 tx timeout [ 212.588115][ T5100] Bluetooth: hci2: command 0x0406 tx timeout [ 213.561186][ T6762] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5787] was attempted by " [ 214.259606][ T6775] Zero length message leads to an empty skb [ 215.814556][ T6783] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 216.489755][ T6789] loop0: detected capacity change from 0 to 8 [ 217.008483][ T6795] SQUASHFS error: Unable to read directory block [631:26] [ 217.028405][ T6795] SQUASHFS error: Unable to read directory block [631:26] [ 217.063205][ T6795] SQUASHFS error: Failed to read block 0x4de: -5 [ 217.075826][ T6795] SQUASHFS error: Failed to read block 0x4de: -5 [ 217.187337][ T28] audit: type=1800 audit(1793942488.164:11): pid=6795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.222" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 217.534900][ T31] net_ratelimit: 36 callbacks suppressed [ 219.946848][ C1] sched: RT throttling activated [ 222.135571][ T6814] netlink: 16 bytes leftover after parsing attributes in process `syz.0.240'. [ 222.567076][ C1] net_ratelimit: 39 callbacks suppressed [ 224.218592][ T6823] FAULT_INJECTION: forcing a failure. [ 224.218592][ T6823] name failslab, interval 1, probability 0, space 0, times 0 [ 224.247069][ T6823] CPU: 1 PID: 6823 Comm: syz.2.243 Not tainted syzkaller #0 [ 224.254464][ T6823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 224.264576][ T6823] Call Trace: [ 224.267902][ T6823] [ 224.270876][ T6823] dump_stack_lvl+0x18c/0x250 [ 224.275622][ T6823] ? show_regs_print_info+0x20/0x20 [ 224.280887][ T6823] ? load_image+0x420/0x420 [ 224.285454][ T6823] ? __might_sleep+0xe0/0xe0 [ 224.290101][ T6823] ? __lock_acquire+0x7eb0/0x7eb0 [ 224.295188][ T6823] should_fail_ex+0x394/0x4c0 [ 224.299927][ T6823] should_failslab+0x9/0x20 [ 224.304484][ T6823] slab_pre_alloc_hook+0x59/0x300 [ 224.309568][ T6823] ? __lock_acquire+0x7eb0/0x7eb0 [ 224.314653][ T6823] kmem_cache_alloc+0x5a/0x2d0 [ 224.319499][ T6823] ? security_file_alloc+0x34/0x120 [ 224.324768][ T6823] security_file_alloc+0x34/0x120 [ 224.329855][ T6823] init_file+0x94/0x1f0 [ 224.334067][ T6823] alloc_empty_file+0xb7/0x1d0 [ 224.338894][ T6823] path_openat+0x120/0x3270 [ 224.343475][ T6823] ? kasan_set_track+0x5f/0x70 [ 224.348296][ T6823] ? verify_lock_unused+0x140/0x140 [ 224.353553][ T6823] ? do_sys_openat2+0xda/0x1d0 [ 224.358448][ T6823] ? __x64_sys_openat+0x139/0x160 [ 224.363510][ T6823] ? do_syscall_64+0x55/0xb0 [ 224.368173][ T6823] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 224.368213][ T6823] ? verify_lock_unused+0x140/0x140 [ 224.368244][ T6823] ? do_filp_open+0x430/0x430 [ 224.384568][ T6823] do_filp_open+0x1f2/0x430 [ 224.389146][ T6823] ? vfs_tmpfile+0x620/0x620 [ 224.393813][ T6823] ? _raw_spin_unlock+0x28/0x40 [ 224.398718][ T6823] ? alloc_fd+0x590/0x640 [ 224.403138][ T6823] do_sys_openat2+0x134/0x1d0 [ 224.407881][ T6823] ? do_sys_open+0xe0/0xe0 [ 224.412356][ T6823] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 224.418418][ T6823] ? lock_chain_count+0x20/0x20 [ 224.423333][ T6823] __x64_sys_openat+0x139/0x160 [ 224.428287][ T6823] do_syscall_64+0x55/0xb0 [ 224.432768][ T6823] ? clear_bhb_loop+0x40/0x90 [ 224.437504][ T6823] ? clear_bhb_loop+0x40/0x90 [ 224.442251][ T6823] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 224.448204][ T6823] RIP: 0033:0x7f22ea76034e [ 224.452666][ T6823] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 224.472349][ T6823] RSP: 002b:00007f22eb742d58 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 224.480846][ T6823] RAX: ffffffffffffffda RBX: 00007f22eb7436c0 RCX: 00007f22ea76034e [ 224.488881][ T6823] RDX: 0000000000000002 RSI: 00007f22eb742ea0 RDI: ffffffffffffff9c [ 224.496908][ T6823] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 224.504931][ T6823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 224.512956][ T6823] R13: 00007f22eb742ee0 R14: 00007f22eb742ea0 R15: 00007f22e05f7000 [ 224.521000][ T6823] [ 224.754026][ T6823] loop2: detected capacity change from 0 to 164 [ 224.903507][ T6826] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 228.086907][ C1] net_ratelimit: 40 callbacks suppressed [ 229.161032][ T28] audit: type=1326 audit(1793942500.244:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6851 comm="syz.3.251" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff708d9fb19 code=0x7ffc0000 [ 229.235027][ T28] audit: type=1326 audit(1793942500.264:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6851 comm="syz.3.251" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff708d9fb19 code=0x7ffc0000 [ 229.274252][ T28] audit: type=1326 audit(1793942500.294:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6851 comm="syz.3.251" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7ff708d9fb19 code=0x7ffc0000 [ 229.334600][ T28] audit: type=1326 audit(1793942500.394:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6851 comm="syz.3.251" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff708d9fb19 code=0x7ffc0000 [ 229.494859][ T28] audit: type=1326 audit(1793942500.394:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6851 comm="syz.3.251" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff708d9fb19 code=0x7ffc0000 [ 229.755793][ T28] audit: type=1326 audit(1793942500.414:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6858 comm="syz.3.251" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff708d6034e code=0x7ffc0000 [ 230.089685][ T28] audit: type=1326 audit(1793942500.564:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6858 comm="syz.3.251" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7ff708d9fb19 code=0x7ffc0000 [ 230.204390][ T28] audit: type=1326 audit(1793942501.264:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6851 comm="syz.3.251" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7ff708d9fb19 code=0x7ffc0000 [ 230.332081][ T28] audit: type=1326 audit(1793942501.374:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6851 comm="syz.3.251" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff708d9fb19 code=0x7ffc0000 [ 230.457051][ T28] audit: type=1326 audit(1793942501.374:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6851 comm="syz.3.251" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff708d9fb19 code=0x7ffc0000 [ 230.742579][ T5893] IPVS: starting estimator thread 0... [ 230.889428][ T6867] IPVS: using max 16 ests per chain, 38400 per kthread [ 231.494433][ T6876] loop1: detected capacity change from 0 to 4096 [ 231.519974][ T6876] EXT4-fs: Ignoring removed orlov option [ 231.637876][ T6876] EXT4-fs (loop1): Test dummy encryption mode enabled [ 231.663448][ T6876] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.744970][ T6883] loop2: detected capacity change from 0 to 2048 [ 232.452923][ T6883] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.498848][ T6883] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.615048][ T6883] fs-verity: sha512 using implementation "sha512-avx2" [ 232.677039][ T6883] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.260: bg 0: block 152: padding at end of block bitmap is not set [ 232.741201][ T6883] fs-verity (loop2, inode 13): Error -28 writing Merkle tree block 1 [ 232.791064][ T6883] fs-verity (loop2, inode 13): Error -28 building Merkle tree [ 232.924271][ T6883] syz.2.260 (6883) used greatest stack depth: 20904 bytes left [ 232.972597][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.126909][ C0] net_ratelimit: 43 callbacks suppressed [ 233.903662][ T6876] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 235.755090][ T6914] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 236.977487][ T56] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 237.029257][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.239846][ T1151] net_ratelimit: 37 callbacks suppressed [ 238.821104][ T6933] loop1: detected capacity change from 0 to 512 [ 238.858437][ T6933] EXT4-fs: Ignoring removed mblk_io_submit option [ 238.883113][ T6933] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 238.935776][ T6933] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 239.165739][ T6933] EXT4-fs error (device loop1): ext4_orphan_get:1434: comm syz.1.275: bad orphan inode 131072 [ 239.390694][ T6933] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.964594][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.107710][ T56] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 240.317204][ T56] usb 1-1: Using ep0 maxpacket: 16 [ 240.326306][ T56] usb 1-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 240.355189][ T56] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA1, skipping [ 240.391787][ T56] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 240.401511][ T56] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.421830][ T56] usb 1-1: Product: syz [ 240.431990][ T56] usb 1-1: Manufacturer: syz [ 240.436699][ T56] usb 1-1: SerialNumber: syz [ 240.455287][ T56] usb 1-1: config 0 descriptor?? [ 240.476597][ T56] appledisplay 1-1:0.0: Could not find int-in endpoint [ 240.488667][ T56] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 241.563526][ T56] usb 1-1: USB disconnect, device number 5 [ 243.526923][ C1] net_ratelimit: 37 callbacks suppressed [ 248.483570][ T7013] loop1: detected capacity change from 0 to 131072 [ 248.536938][ T1086] net_ratelimit: 28 callbacks suppressed [ 248.556415][ T7013] F2FS-fs (loop1): Found nat_bits in checkpoint [ 248.627559][ T7013] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 248.661653][ T7013] F2FS-fs (loop1): lookup inode (7) has corrupted xattr [ 250.453036][ T7023] FAULT_INJECTION: forcing a failure. [ 250.453036][ T7023] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 250.502588][ T7023] CPU: 1 PID: 7023 Comm: syz.3.301 Not tainted syzkaller #0 [ 250.509985][ T7023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 250.520129][ T7023] Call Trace: [ 250.523450][ T7023] [ 250.526424][ T7023] dump_stack_lvl+0x18c/0x250 [ 250.531180][ T7023] ? show_regs_print_info+0x20/0x20 [ 250.536468][ T7023] ? load_image+0x420/0x420 [ 250.541064][ T7023] ? __lock_acquire+0x7eb0/0x7eb0 [ 250.546159][ T7023] should_fail_ex+0x394/0x4c0 [ 250.550907][ T7023] prepare_alloc_pages+0x1e1/0x5b0 [ 250.556091][ T7023] __alloc_pages+0x134/0x460 [ 250.560741][ T7023] ? zone_statistics+0x170/0x170 [ 250.565756][ T7023] cuse_channel_open+0x169/0x650 [ 250.570794][ T7023] ? __kobject_del+0x2e0/0x2e0 [ 250.575613][ T7023] ? fuse_dax_writepages+0xe0/0xe0 [ 250.580799][ T7023] misc_open+0x326/0x3a0 [ 250.585113][ T7023] chrdev_open+0x58c/0x600 [ 250.589601][ T7023] ? cd_forget+0x160/0x160 [ 250.594089][ T7023] ? fsnotify_perm+0x3ed/0x5e0 [ 250.598942][ T7023] do_dentry_open+0x880/0x14b0 [ 250.603776][ T7023] ? cd_forget+0x160/0x160 [ 250.608347][ T7023] path_openat+0x284f/0x3270 [ 250.613023][ T7023] ? do_sys_openat2+0xda/0x1d0 [ 250.617855][ T7023] ? __x64_sys_openat+0x139/0x160 [ 250.622948][ T7023] ? verify_lock_unused+0x140/0x140 [ 250.628212][ T7023] ? do_filp_open+0x430/0x430 [ 250.632963][ T7023] do_filp_open+0x1f2/0x430 [ 250.637535][ T7023] ? vfs_tmpfile+0x620/0x620 [ 250.642206][ T7023] ? _raw_spin_unlock+0x28/0x40 [ 250.647111][ T7023] ? alloc_fd+0x590/0x640 [ 250.651520][ T7023] do_sys_openat2+0x134/0x1d0 [ 250.656261][ T7023] ? do_sys_open+0xe0/0xe0 [ 250.660761][ T7023] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 250.666803][ T7023] ? lock_chain_count+0x20/0x20 [ 250.671732][ T7023] __x64_sys_openat+0x139/0x160 [ 250.676657][ T7023] do_syscall_64+0x55/0xb0 [ 250.681144][ T7023] ? clear_bhb_loop+0x40/0x90 [ 250.685892][ T7023] ? clear_bhb_loop+0x40/0x90 [ 250.690641][ T7023] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 250.696592][ T7023] RIP: 0033:0x7ff708d9fb19 [ 250.701062][ T7023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.720738][ T7023] RSP: 002b:00007ff709c21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 250.729335][ T7023] RAX: ffffffffffffffda RBX: 00007ff709025fa0 RCX: 00007ff708d9fb19 [ 250.737383][ T7023] RDX: 0000000000000002 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 250.745440][ T7023] RBP: 00007ff708e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 250.753480][ T7023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.761516][ T7023] R13: 00007ff709026038 R14: 00007ff709025fa0 R15: 00007ffdb7665788 [ 250.769562][ T7023] [ 253.699627][ T7046] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 253.709347][ T7046] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 253.814661][ T7049] x86/PAT: syz.0.308:7049 freeing invalid memtype [mem 0xfe408000-0xfe408fff] [ 253.862711][ T7048] x86/PAT: syz.0.308:7048 freeing invalid memtype [mem 0xfe407000-0xfe407fff] [ 254.006885][ C1] net_ratelimit: 28 callbacks suppressed [ 254.035359][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 254.035375][ T28] audit: type=1326 audit(1793942525.114:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7055 comm="syz.1.302" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79df9fb19 code=0x7ffc0000 [ 254.069940][ T28] audit: type=1326 audit(1793942525.114:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7055 comm="syz.1.302" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79df9fb19 code=0x7ffc0000 [ 254.095357][ T28] audit: type=1326 audit(1793942525.154:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7055 comm="syz.1.302" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79df9fb19 code=0x7ffc0000 [ 254.143665][ T28] audit: type=1326 audit(1793942525.154:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7055 comm="syz.1.302" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79df9fb19 code=0x7ffc0000 [ 254.174721][ T28] audit: type=1326 audit(1793942525.154:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7055 comm="syz.1.302" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd79df9fb19 code=0x7ffc0000 [ 254.216271][ T28] audit: type=1326 audit(1793942525.154:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7055 comm="syz.1.302" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79df9fb19 code=0x7ffc0000 [ 254.242045][ T7059] qnx4: no qnx4 filesystem (no root dir). [ 254.253077][ T28] audit: type=1326 audit(1793942525.154:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7055 comm="syz.1.302" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79df9fb19 code=0x7ffc0000 [ 254.278436][ T28] audit: type=1326 audit(1793942525.174:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7055 comm="syz.1.302" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79df9fb19 code=0x7ffc0000 [ 254.362805][ T28] audit: type=1326 audit(1793942525.174:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7055 comm="syz.1.302" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79df9fb19 code=0x7ffc0000 [ 254.421389][ T28] audit: type=1326 audit(1793942525.174:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7055 comm="syz.1.302" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7fd79df9fb19 code=0x7ffc0000 [ 254.705978][ T7063] netlink: 32 bytes leftover after parsing attributes in process `syz.1.311'. [ 254.737578][ T7063] netlink: 32 bytes leftover after parsing attributes in process `syz.1.311'. [ 256.539753][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.554735][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.734037][ T7078] null_blk: disk nullb1 created [ 259.425573][ T7082] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 259.435160][ T7082] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 259.606897][ C0] net_ratelimit: 32 callbacks suppressed [ 261.899602][ T7102] bridge0: port 3(syzkaller0) entered blocking state [ 261.916029][ T7102] bridge0: port 3(syzkaller0) entered disabled state [ 261.926677][ T7102] syzkaller0: entered allmulticast mode [ 261.938642][ T7102] syzkaller0: entered promiscuous mode [ 261.946431][ T7102] bridge0: port 3(syzkaller0) entered blocking state [ 261.953501][ T7102] bridge0: port 3(syzkaller0) entered forwarding state [ 261.985950][ T7099] bridge0: port 3(syzkaller0) entered disabled state [ 262.026409][ T7099] syzkaller0 (unregistering): left allmulticast mode [ 262.040493][ T7099] syzkaller0 (unregistering): left promiscuous mode [ 262.050241][ T7099] bridge0: port 3(syzkaller0) entered disabled state [ 263.148501][ T7116] loop3: detected capacity change from 0 to 512 [ 263.276102][ T7118] loop1: detected capacity change from 0 to 128 [ 263.306535][ T7116] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0002] [ 263.347054][ T7116] System zones: 0-7 [ 263.369986][ T7116] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.383906][ T7118] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 263.442672][ T5787] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 263.559271][ T7124] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 263.568742][ T7124] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 263.590262][ T5797] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.782185][ T7129] qnx4: no qnx4 filesystem (no root dir). [ 264.711819][ C0] net_ratelimit: 45 callbacks suppressed [ 268.032563][ T7160] qnx4: no qnx4 filesystem (no root dir). [ 269.110099][ T7165] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 269.119237][ T7165] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 269.192423][ T7170] IPv6: NLM_F_CREATE should be specified when creating new route [ 270.006905][ C1] net_ratelimit: 48 callbacks suppressed [ 272.828863][ T7186] loop2: detected capacity change from 0 to 32768 [ 272.874923][ T7186] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.352 (7186) [ 273.012851][ T7186] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 273.012947][ T7186] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 273.013011][ T7186] BTRFS info (device loop2): using free space tree [ 273.165010][ T7186] BTRFS info (device loop2): enabling ssd optimizations [ 273.257069][ T972] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 273.361073][ T28] kauditd_printk_skb: 66 callbacks suppressed [ 273.361090][ T28] audit: type=1800 audit(1793942544.444:102): pid=7186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.352" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 273.542602][ T5791] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 273.590763][ T7212] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 273.741723][ T972] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 273.767359][ T972] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 273.822123][ T972] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 273.856079][ T972] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.911381][ T972] usb 2-1: Product: syz [ 273.915638][ T972] usb 2-1: Manufacturer: syz [ 273.966149][ T972] usb 2-1: SerialNumber: syz [ 275.049864][ C0] net_ratelimit: 32 callbacks suppressed [ 275.275235][ T972] ti_usb_3410_5052 2-1:2.0: TI USB 5052 2 port adapter converter detected [ 275.453979][ T972] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 275.521866][ T972] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 276.924473][ T5887] usb 2-1: USB disconnect, device number 5 [ 276.963646][ T7234] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 276.972830][ T7234] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 276.990548][ T5887] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 277.016763][ T5887] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 277.030365][ T5887] ti_usb_3410_5052 2-1:2.0: device disconnected [ 278.700102][ T7248] 9pnet_fd: Insufficient options for proto=fd [ 279.035041][ T7255] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 280.186968][ T31] net_ratelimit: 33 callbacks suppressed [ 282.651973][ T7273] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 282.660948][ T7273] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 282.848133][ T7276] netlink: 16 bytes leftover after parsing attributes in process `syz.1.373'. [ 283.197259][ T7281] 9pnet_fd: Insufficient options for proto=fd [ 284.862142][ T7298] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 285.207110][ T1151] net_ratelimit: 29 callbacks suppressed [ 287.364769][ T7312] netlink: 16 bytes leftover after parsing attributes in process `syz.1.382'. [ 288.743298][ T7323] qnx4: no qnx4 filesystem (no root dir). [ 288.994816][ T7320] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 289.003997][ T7320] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 290.566874][ C0] net_ratelimit: 28 callbacks suppressed [ 290.639474][ T7336] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 292.439480][ T7344] netlink: 16 bytes leftover after parsing attributes in process `syz.3.392'. [ 293.855231][ T7359] qnx4: no qnx4 filesystem (no root dir). [ 294.052204][ T7363] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 294.061349][ T7363] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 294.800421][ T7370] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 295.767010][ C0] net_ratelimit: 28 callbacks suppressed [ 300.019570][ T7387] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 300.869856][ T1108] net_ratelimit: 29 callbacks suppressed [ 301.672366][ T7400] qnx4: no qnx4 filesystem (no root dir). [ 306.326947][ C0] net_ratelimit: 25 callbacks suppressed [ 306.518845][ T7421] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 311.936850][ C1] net_ratelimit: 28 callbacks suppressed [ 313.744073][ T7457] qnx4: no qnx4 filesystem (no root dir). [ 316.993204][ T7474] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 317.446900][ C0] net_ratelimit: 26 callbacks suppressed [ 317.566211][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.596878][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.679148][ T7490] qnx4: no qnx4 filesystem (no root dir). [ 320.977965][ T7493] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 320.987355][ T7493] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 321.452547][ T7498] qnx4: no qnx4 filesystem (no root dir). [ 322.649528][ C1] net_ratelimit: 26 callbacks suppressed [ 326.605328][ T7535] qnx4: no qnx4 filesystem (no root dir). [ 327.863932][ T7546] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 328.017057][ C0] net_ratelimit: 25 callbacks suppressed [ 329.775817][ T7541] loop3: detected capacity change from 0 to 32768 [ 329.858023][ T7541] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.439 (7541) [ 331.068819][ T7559] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 331.078033][ T7559] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 333.312638][ C1] net_ratelimit: 15 callbacks suppressed [ 334.125052][ T7558] ip_tables: iptables: counters copy to user failed while replacing table [ 334.526086][ T7577] qnx4: no qnx4 filesystem (no root dir). [ 338.726922][ C1] net_ratelimit: 28 callbacks suppressed [ 339.941503][ T7604] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 339.950691][ T7604] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 341.010758][ T7606] comedi comedi2: Buffer allocation failed [ 343.766866][ C0] net_ratelimit: 28 callbacks suppressed [ 344.581938][ T7627] qnx4: no qnx4 filesystem (no root dir). [ 346.167497][ T7635] qnx4: no qnx4 filesystem (no root dir). [ 348.564815][ T7653] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 348.574996][ T7653] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 348.886848][ C1] net_ratelimit: 35 callbacks suppressed [ 353.698027][ T7677] qnx4: no qnx4 filesystem (no root dir). [ 354.006961][ T1151] net_ratelimit: 37 callbacks suppressed [ 355.889580][ T7692] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 355.898872][ T7692] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 358.941377][ T56] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 359.127781][ T770] net_ratelimit: 23 callbacks suppressed [ 359.165681][ T56] usb 1-1: config 4 has an invalid interface number: 44 but max is 0 [ 359.184223][ T56] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 359.241392][ T56] usb 1-1: config 4 has no interface number 0 [ 359.261514][ T56] usb 1-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 359.320438][ T56] usb 1-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 359.366927][ T56] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.402379][ T56] usb 1-1: Product: syz [ 359.413910][ T56] usb 1-1: Manufacturer: syz [ 359.444265][ T56] usb 1-1: SerialNumber: syz [ 359.919759][ T56] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 359.942313][ T56] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 359.969861][ T56] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 359.989897][ T56] usb 1-1: media controller created [ 360.025849][ T56] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 360.536106][ T56] DVB: Unable to find symbol dib7000p_attach() [ 360.574027][ T56] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 361.026932][ T56] rc_core: IR keymap rc-dib0700-rc5 not found [ 361.121715][ T56] Registered IR keymap rc-empty [ 361.166174][ T56] dvb-usb: could not initialize remote control. [ 361.212153][ T56] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 361.779098][ T56] usb 1-1: USB disconnect, device number 6 [ 362.819798][ T56] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 364.267081][ T770] net_ratelimit: 24 callbacks suppressed [ 367.363714][ T7750] qnx4: no qnx4 filesystem (no root dir). [ 368.699318][ T7753] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 369.606876][ C1] net_ratelimit: 24 callbacks suppressed [ 373.183175][ T7768] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 373.192265][ T7768] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 375.131373][ C1] net_ratelimit: 28 callbacks suppressed [ 378.974617][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.983329][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.886972][ C0] net_ratelimit: 30 callbacks suppressed [ 386.184429][ T7852] qnx4: no qnx4 filesystem (no root dir). [ 386.326840][ C0] net_ratelimit: 48 callbacks suppressed [ 387.140460][ T7855] loop2: detected capacity change from 0 to 128 [ 390.921376][ T7871] qnx4: no qnx4 filesystem (no root dir). [ 391.926842][ C1] net_ratelimit: 28 callbacks suppressed [ 395.156243][ T7891] qnx4: no qnx4 filesystem (no root dir). [ 397.885019][ T1086] net_ratelimit: 22 callbacks suppressed [ 401.523453][ T972] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 401.734526][ T972] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 401.778372][ T972] usb 2-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 401.817005][ T972] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.862009][ T972] usb 2-1: config 0 descriptor?? [ 401.913745][ T7907] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 402.538260][ T6741] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 402.550684][ T6741] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 402.561133][ T6741] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 402.581895][ T6741] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 402.604495][ T6741] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 402.612842][ T6741] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 402.695608][ T972] hid_parser_main: 465 callbacks suppressed [ 402.695627][ T972] nzxt-kraken2 0003:1E71:170E.0003: unknown main item tag 0x0 [ 402.746585][ T972] nzxt-kraken2 0003:1E71:170E.0003: unknown main item tag 0x0 [ 402.798133][ T972] nzxt-kraken2 0003:1E71:170E.0003: unknown main item tag 0x0 [ 402.805729][ T972] nzxt-kraken2 0003:1E71:170E.0003: unknown main item tag 0x0 [ 402.833276][ T972] nzxt-kraken2 0003:1E71:170E.0003: unknown main item tag 0x0 [ 402.905083][ T972] nzxt-kraken2 0003:1E71:170E.0003: unknown main item tag 0x0 [ 402.956904][ T972] nzxt-kraken2 0003:1E71:170E.0003: unknown main item tag 0x0 [ 402.966931][ C0] net_ratelimit: 22 callbacks suppressed [ 403.017312][ T972] nzxt-kraken2 0003:1E71:170E.0003: unknown main item tag 0x0 [ 403.045169][ T972] nzxt-kraken2 0003:1E71:170E.0003: unknown main item tag 0x0 [ 403.065245][ T972] nzxt-kraken2 0003:1E71:170E.0003: unknown main item tag 0x0 [ 403.123425][ T1086] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.152379][ T972] nzxt-kraken2 0003:1E71:170E.0003: hidraw0: USB HID v7e.ff Device [HID 1e71:170e] on usb-dummy_hcd.1-1/input0 [ 403.318624][ T972] usb 2-1: USB disconnect, device number 6 [ 403.611894][ T7921] fido_id[7921]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 403.809525][ T1086] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.886288][ T7916] rxe_eth0 speed is unknown, defaulting to 1000 [ 404.067531][ T1086] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.360340][ T1086] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.731864][ T52] Bluetooth: hci3: command tx timeout [ 406.168090][ T7916] chnl_net:caif_netlink_parms(): no params data found [ 406.808061][ T52] Bluetooth: hci3: command tx timeout [ 409.126871][ C0] net_ratelimit: 23 callbacks suppressed [ 409.220997][ T52] Bluetooth: hci3: command tx timeout [ 410.043778][ T7916] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.337436][ T7916] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.377076][ T7916] bridge_slave_0: entered allmulticast mode [ 410.384842][ T7916] bridge_slave_0: entered promiscuous mode [ 410.448493][ T7916] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.455727][ T7916] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.506114][ T7916] bridge_slave_1: entered allmulticast mode [ 410.535165][ T7916] bridge_slave_1: entered promiscuous mode [ 410.834122][ T7970] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 410.843190][ T7970] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 411.286863][ T52] Bluetooth: hci3: command tx timeout [ 411.298775][ T7916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.583267][ T7916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.650429][ T7916] team0: Port device team_slave_0 added [ 412.797885][ T7916] team0: Port device team_slave_1 added [ 414.166894][ C0] net_ratelimit: 24 callbacks suppressed [ 416.156841][ T7916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.186177][ T7916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.272967][ T7916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.318522][ T7993] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 416.366140][ T7916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.386865][ T7993] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 416.409882][ T7916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.491985][ T7916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.021149][ T8013] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 417.030119][ T8013] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 417.477179][ T7916] hsr_slave_0: entered promiscuous mode [ 417.532892][ T7916] hsr_slave_1: entered promiscuous mode [ 417.581716][ T7916] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 417.618453][ T7916] Cannot create hsr debugfs directory [ 418.638526][ T1086] hsr_slave_0: left promiscuous mode [ 418.671981][ T1086] hsr_slave_1: left promiscuous mode [ 418.716435][ T1086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.739362][ T1086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.788488][ T1086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 418.846990][ T1086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.930286][ T1086] bridge_slave_1: left allmulticast mode [ 418.935965][ T1086] bridge_slave_1: left promiscuous mode [ 419.009068][ T1086] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.092203][ T1086] bridge_slave_0: left allmulticast mode [ 419.124608][ T1086] bridge_slave_0: left promiscuous mode [ 419.146553][ T1086] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.286818][ C0] net_ratelimit: 19 callbacks suppressed [ 420.575849][ T1086] veth1_macvtap: left promiscuous mode [ 420.627359][ T1086] veth0_macvtap: left promiscuous mode [ 420.650522][ T1086] veth1_vlan: left promiscuous mode [ 420.663329][ T1086] veth0_vlan: left promiscuous mode [ 425.039051][ T31] net_ratelimit: 27 callbacks suppressed [ 428.133658][ T1086] team0 (unregistering): Port device team_slave_1 removed [ 428.277979][ T1086] team0 (unregistering): Port device team_slave_0 removed [ 428.403740][ T1086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 428.542925][ T1086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 429.495416][ T1086] bond0 (unregistering): Released all slaves [ 429.749389][ T8057] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 429.758462][ T8057] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 430.044021][ T8049] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 430.062796][ T8049] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 430.566845][ C1] net_ratelimit: 17 callbacks suppressed [ 433.687685][ T8085] qnx4: no qnx4 filesystem (no root dir). [ 434.671381][ T7916] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 434.738622][ T7916] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 434.829138][ T7916] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 434.903691][ T7916] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 435.420118][ T7916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.523305][ T7916] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.576279][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.583558][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.695138][ T1108] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.702489][ T1108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.908636][ T7916] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 435.957634][ T7916] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 436.188004][ T8108] bridge0: port 3(batadv0) entered blocking state [ 436.196464][ T8108] bridge0: port 3(batadv0) entered disabled state [ 436.231065][ T8108] batadv0: entered allmulticast mode [ 436.249863][ T8108] batadv0: entered promiscuous mode [ 436.266480][ T8108] bridge0: port 3(batadv0) entered blocking state [ 436.273193][ T8108] bridge0: port 3(batadv0) entered forwarding state [ 436.407044][ C1] net_ratelimit: 24 callbacks suppressed [ 436.485658][ T1108] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 436.495343][ T1108] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 437.425351][ T7916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.952051][ T8132] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 437.961633][ T8132] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 439.045726][ T7916] veth0_vlan: entered promiscuous mode [ 439.080445][ T7916] veth1_vlan: entered promiscuous mode [ 440.765477][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.771921][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.862723][ T7916] veth0_macvtap: entered promiscuous mode [ 440.878503][ T7916] veth1_macvtap: entered promiscuous mode [ 440.952530][ T7916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.981440][ T7916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.006919][ T7916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.030531][ T7916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.076933][ T7916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.100022][ T7916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.130781][ T7916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 441.213487][ T7916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.242596][ T7916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.278072][ T7916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.309081][ T7916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.330270][ T7916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.363623][ T7916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.401941][ T7916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.435148][ T7916] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.466897][ T7916] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.475730][ T7916] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.517045][ T7916] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.579133][ T7916] net_ratelimit: 15 callbacks suppressed [ 441.874969][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.909957][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.073495][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.108014][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.519653][ T8170] qnx4: no qnx4 filesystem (no root dir). [ 443.400542][ T8186] loop4: detected capacity change from 0 to 512 [ 443.442461][ T8186] EXT4-fs: Ignoring removed i_version option [ 443.501725][ T8186] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 443.694769][ T8189] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 443.703819][ T8189] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 443.731954][ T8186] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.580: invalid indirect mapped block 4294967295 (level 1) [ 445.569677][ T8186] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.580: invalid indirect mapped block 4294967295 (level 1) [ 445.626194][ T8186] EXT4-fs (loop4): 2 truncates cleaned up [ 445.645638][ T8186] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.871600][ T7916] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.393184][ T31] net_ratelimit: 51 callbacks suppressed [ 447.433733][ T8217] qnx4: no qnx4 filesystem (no root dir). [ 447.448519][ T27] af_packet: tpacket_rcv: packet too big, clamped from 80 to 4294967272. macoff=96 [ 451.075183][ T8250] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 452.566857][ C0] net_ratelimit: 29 callbacks suppressed [ 453.112914][ T8250] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 456.800610][ T8305] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 456.847284][ T8305] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 457.686882][ C0] net_ratelimit: 31 callbacks suppressed [ 461.287138][ T56] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 461.499270][ T56] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 461.527355][ T56] usb 2-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 461.536485][ T56] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.600194][ T56] usb 2-1: config 0 descriptor?? [ 461.608207][ T8327] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 462.082914][ T56] usbhid 2-1:0.0: can't add hid device: -71 [ 462.115225][ T56] usbhid: probe of 2-1:0.0 failed with error -71 [ 462.164433][ T56] usb 2-1: USB disconnect, device number 7 [ 462.806792][ C0] net_ratelimit: 28 callbacks suppressed [ 464.405007][ T8357] qnx4: no qnx4 filesystem (no root dir). [ 466.485576][ T8363] loop2: detected capacity change from 0 to 512 [ 466.897124][ T8363] EXT4-fs (loop2): Test dummy encryption mode enabled [ 466.904002][ T8363] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 467.002169][ T8363] EXT4-fs error (device loop2): ext4_orphan_get:1434: comm syz.2.617: bad orphan inode 131083 [ 467.029775][ T8363] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.225809][ T8363] overlayfs: upper fs needs to support d_type. [ 467.392414][ T8363] fscrypt (loop2): Error allocating 'xts(aes)' transform: -4 [ 467.437483][ T8363] overlayfs: upper fs does not support tmpfile. [ 467.444356][ T8363] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 467.593297][ T8363] overlayfs: failed index dir cleanup (-512) [ 467.646823][ T8363] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 467.829780][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.927094][ C1] net_ratelimit: 27 callbacks suppressed [ 468.345384][ T8387] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 468.953705][ T8393] qnx4: no qnx4 filesystem (no root dir). [ 469.074518][ T8397] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 469.124666][ T8397] Cannot find del_set index 0 as target [ 469.214615][ T8395] loop4: detected capacity change from 0 to 8 [ 469.493162][ T8395] SQUASHFS error: xz decompression failed, data probably corrupt [ 469.550978][ T8395] SQUASHFS error: Failed to read block 0x108: -5 [ 469.568326][ T8405] netlink: 20 bytes leftover after parsing attributes in process `syz.1.621'. [ 469.583639][ T8395] SQUASHFS error: Unable to read metadata cache entry [106] [ 469.624299][ T8395] SQUASHFS error: Unable to read inode 0x11f [ 469.992316][ T8409] loop1: detected capacity change from 0 to 4096 [ 470.060695][ T8409] NILFS (loop1): invalid segment: Checksum error in segment payload [ 470.105157][ T8409] NILFS (loop1): trying rollback from an earlier position [ 470.187734][ T8409] NILFS (loop1): recovery complete [ 470.225295][ T8415] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 470.324424][ T8409] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 4100 already freed [ 470.355094][ T8409] NILFS (loop1): error -2 preparing GC: cannot delete virtual blocks from DAT file [ 473.056773][ C1] net_ratelimit: 22 callbacks suppressed [ 474.480067][ T8450] netlink: 16 bytes leftover after parsing attributes in process `syz.1.633'. [ 476.498929][ T5889] IPVS: starting estimator thread 0... [ 477.236942][ T8469] IPVS: using max 16 ests per chain, 38400 per kthread [ 478.166827][ C1] net_ratelimit: 18 callbacks suppressed [ 480.101759][ T8495] netlink: 16 bytes leftover after parsing attributes in process `syz.0.642'. [ 481.001695][ T8504] loop0: detected capacity change from 0 to 4096 [ 482.407647][ T8504] NILFS (loop0): invalid segment: Checksum error in segment payload [ 482.434499][ T8504] NILFS (loop0): trying rollback from an earlier position [ 482.510915][ T8504] NILFS (loop0): recovery complete [ 482.539315][ T8518] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 483.286788][ C0] net_ratelimit: 27 callbacks suppressed [ 488.486836][ C1] net_ratelimit: 27 callbacks suppressed [ 491.508475][ T8586] qnx4: no qnx4 filesystem (no root dir). [ 493.537206][ T61] net_ratelimit: 20 callbacks suppressed [ 493.546275][ T8612] netlink: 20 bytes leftover after parsing attributes in process `syz.1.663'. [ 498.648088][ T31] net_ratelimit: 19 callbacks suppressed [ 501.360759][ T8677] loop1: detected capacity change from 0 to 4096 [ 502.169591][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.176576][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.272377][ T8677] NILFS (loop1): invalid segment: Checksum error in segment payload [ 502.461569][ T8677] NILFS (loop1): trying rollback from an earlier position [ 502.576554][ T8677] NILFS (loop1): recovery complete [ 502.598943][ T8688] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 502.643923][ T8677] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 4100 already freed [ 502.677286][ T8677] NILFS (loop1): error -2 preparing GC: cannot delete virtual blocks from DAT file [ 504.246882][ C1] net_ratelimit: 20 callbacks suppressed [ 505.778442][ T8722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.682'. [ 509.526818][ C1] net_ratelimit: 25 callbacks suppressed [ 510.382772][ T8754] loop2: detected capacity change from 0 to 4096 [ 512.234234][ T8754] NILFS (loop2): invalid segment: Checksum error in segment payload [ 512.367014][ T8754] NILFS (loop2): trying rollback from an earlier position [ 512.511967][ T8754] NILFS (loop2): recovery complete [ 512.577090][ T8766] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 513.243884][ T8776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.693'. [ 514.091824][ T8791] loop0: detected capacity change from 0 to 4096 [ 514.182703][ T8793] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 514.646153][ T8791] EXT4-fs: Ignoring removed orlov option [ 514.813731][ T8791] EXT4-fs (loop0): Test dummy encryption mode enabled [ 514.853184][ T8791] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 514.992637][ T8796] loop2: detected capacity change from 0 to 4096 [ 515.040107][ T8796] EXT4-fs: Ignoring removed orlov option [ 515.126804][ C1] net_ratelimit: 21 callbacks suppressed [ 515.203008][ T8796] EXT4-fs (loop2): Test dummy encryption mode enabled [ 515.528032][ T972] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 515.570519][ T8796] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 516.476831][ T972] usb 1-1: Using ep0 maxpacket: 8 [ 516.529931][ T972] usb 1-1: unable to get BOS descriptor or descriptor too short [ 516.603585][ T972] usb 1-1: config 64 has an invalid interface number: 29 but max is 0 [ 516.653863][ T972] usb 1-1: config 64 has no interface number 0 [ 516.707230][ T972] usb 1-1: config 64 interface 29 has no altsetting 0 [ 516.731904][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.743413][ T8800] loop1: detected capacity change from 0 to 4096 [ 516.767601][ T972] usb 1-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=ff.1a [ 516.847072][ T972] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.855172][ T972] usb 1-1: Product: 藇ꖀ週ീ㐦䂦쒈髜骦蝒훀⠼༕里䈢쐹谒뽚粋댺沮兮ಇ俜鞴㤶㼤쨦苊盶㊩⣈䪉脋똾꯬釰࡮칪Ў╓牥钐ጃ砱㞈㡒쾩遯팙郑髣 [ 516.883376][ T8800] NILFS (loop1): invalid segment: Checksum error in segment payload [ 516.894106][ T972] usb 1-1: Manufacturer: ⠊ [ 516.939937][ T8800] NILFS (loop1): trying rollback from an earlier position [ 516.949525][ T972] usb 1-1: SerialNumber: 洪䤓⣋厳烮욄뭱ᰫ蹬ọ垶Ҕ⼡쏾榻嵶ꞵ妃䲙ꢓ涙糋꛻ᘌ㳭谢殗䛾⼝⻢떵粝錄푈玁镣왰䠵絨㦢襗緲쀻ᳶ黭꘧볐ဗ [ 516.993535][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.037571][ T972] usb 1-1: can't set config #64, error -71 [ 517.086918][ T972] usb 1-1: USB disconnect, device number 7 [ 519.166867][ T8800] NILFS (loop1): recovery complete [ 519.201988][ T8800] NILFS (loop1): error -4 creating segctord thread [ 519.952528][ T8834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.703'. [ 520.328328][ T1086] net_ratelimit: 42 callbacks suppressed [ 521.236486][ T8844] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 521.247348][ T8844] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 521.308316][ T8849] loop2: detected capacity change from 0 to 4096 [ 521.319985][ T8847] loop4: detected capacity change from 0 to 4096 [ 521.327084][ T8849] EXT4-fs: Ignoring removed orlov option [ 521.365197][ T8847] NILFS (loop4): invalid segment: Checksum error in segment payload [ 521.452852][ T8847] NILFS (loop4): trying rollback from an earlier position [ 523.115021][ T8849] EXT4-fs (loop2): Test dummy encryption mode enabled [ 523.194526][ T8847] NILFS (loop4): recovery complete [ 523.230527][ T8849] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 523.306805][ T8857] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 523.446005][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.865644][ T8860] loop2: detected capacity change from 0 to 4096 [ 523.922743][ T8860] NILFS (loop2): invalid segment: Checksum error in segment payload [ 523.958028][ T8860] NILFS (loop2): trying rollback from an earlier position [ 524.044931][ T8860] NILFS (loop2): recovery complete [ 524.187093][ T8867] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 524.318720][ T8860] NILFS (loop2): nilfs_palloc_freev (ino=3): entry number 4100 already freed [ 524.351690][ T8860] NILFS (loop2): error -2 preparing GC: cannot delete virtual blocks from DAT file [ 524.591244][ T8877] netlink: 4 bytes leftover after parsing attributes in process `syz.4.714'. [ 525.545844][ T1086] net_ratelimit: 23 callbacks suppressed [ 529.418389][ T8909] loop1: detected capacity change from 0 to 4096 [ 529.483548][ T8914] loop4: detected capacity change from 0 to 1024 [ 530.285955][ T8892] Bluetooth: hci3: command 0x0406 tx timeout [ 530.309059][ T8909] NILFS (loop1): invalid segment: Checksum error in segment payload [ 530.318347][ T8909] NILFS (loop1): trying rollback from an earlier position [ 530.389245][ T8909] NILFS (loop1): recovery complete [ 530.439515][ T8919] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 530.584122][ T8921] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 4100 already freed [ 530.654809][ C0] net_ratelimit: 21 callbacks suppressed [ 530.671944][ T8921] NILFS (loop1): error -2 preparing GC: cannot delete virtual blocks from DAT file [ 531.010986][ T8914] hfsplus: invalid length 1280 has been corrected to 255 [ 531.056867][ T8914] hfsplus: walked past end of dir [ 533.017123][ T8] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 533.041812][ T8933] loop4: detected capacity change from 0 to 4096 [ 533.058526][ T8933] EXT4-fs: Ignoring removed orlov option [ 533.078781][ T8933] EXT4-fs (loop4): Test dummy encryption mode enabled [ 533.133660][ T8933] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 533.247133][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 533.279421][ T8] usb 2-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 533.321288][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.349164][ T8] usb 2-1: config 0 descriptor?? [ 533.356333][ T8931] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 533.557039][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 533.626873][ T8937] loop0: detected capacity change from 0 to 4096 [ 533.663961][ T8937] NILFS (loop0): invalid segment: Checksum error in segment payload [ 533.674402][ T8937] NILFS (loop0): trying rollback from an earlier position [ 533.748700][ T8937] NILFS (loop0): recovery complete [ 533.767034][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 533.785539][ T8938] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 533.803590][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 533.811646][ T8] usbhid 2-1:0.0: can't add hid device: -71 [ 533.832856][ T9] usb 5-1: config 64 has an invalid interface number: 29 but max is 0 [ 533.847267][ T8] usbhid: probe of 2-1:0.0 failed with error -71 [ 533.872373][ T9] usb 5-1: config 64 has no interface number 0 [ 533.887789][ T8] usb 2-1: USB disconnect, device number 8 [ 533.913950][ T9] usb 5-1: config 64 interface 29 has no altsetting 0 [ 533.921217][ T8937] NILFS (loop0): nilfs_palloc_freev (ino=3): entry number 4100 already freed [ 533.941117][ T9] usb 5-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=ff.1a [ 533.952529][ T8937] NILFS (loop0): error -2 preparing GC: cannot delete virtual blocks from DAT file [ 533.964293][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.992335][ T9] usb 5-1: Product: 藇ꖀ週ീ㐦䂦쒈髜骦蝒훀⠼༕里䈢쐹谒뽚粋댺沮兮ಇ俜鞴㤶㼤쨦苊盶㊩⣈䪉脋똾꯬釰࡮칪Ў╓牥钐ጃ砱㞈㡒쾩遯팙郑髣 [ 534.038934][ T9] usb 5-1: Manufacturer: ⠊ [ 534.043601][ T9] usb 5-1: SerialNumber: 洪䤓⣋厳烮욄뭱ᰫ蹬ọ垶Ҕ⼡쏾榻嵶ꞵ妃䲙ꢓ涙糋꛻ᘌ㳭谢殗䛾⼝⻢떵粝錄푈玁镣왰䠵絨㦢襗緲쀻ᳶ黭꘧볐ဗ [ 535.601485][ T9] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 535.678180][ T9] usb 5-1: USB disconnect, device number 2 [ 535.771978][ T770] net_ratelimit: 29 callbacks suppressed [ 536.885538][ T7916] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.091122][ T8955] loop1: detected capacity change from 0 to 4096 [ 537.152714][ T8955] NILFS (loop1): invalid segment: Checksum error in segment payload [ 537.183623][ T8955] NILFS (loop1): trying rollback from an earlier position [ 537.259580][ T8955] NILFS (loop1): recovery complete [ 537.297860][ T8958] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 537.380020][ T8955] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 4100 already freed [ 537.412327][ T8955] NILFS (loop1): error -2 preparing GC: cannot delete virtual blocks from DAT file [ 541.052139][ C0] net_ratelimit: 19 callbacks suppressed [ 541.568298][ T8973] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 541.627311][ T8966] loop1: detected capacity change from 0 to 32768 [ 541.627790][ T8973] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 541.719576][ T8966] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.741 (8966) [ 541.883717][ T8966] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 541.908937][ T8966] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 541.919714][ T8966] BTRFS info (device loop1): setting nodatacow, compression disabled [ 541.929253][ T8966] BTRFS info (device loop1): setting datasum, datacow enabled [ 541.938345][ T8966] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 541.949024][ T8966] BTRFS info (device loop1): force zstd compression, level 3 [ 541.956655][ T8966] BTRFS info (device loop1): turning on sync discard [ 541.963942][ T8966] BTRFS warning (device loop1): excessive commit interval 43283 [ 541.972263][ T8966] BTRFS info (device loop1): enabling ssd optimizations [ 541.979773][ T8966] BTRFS info (device loop1): using spread ssd allocation scheme [ 541.987976][ T8966] BTRFS info (device loop1): not using ssd optimizations [ 541.995476][ T8966] BTRFS info (device loop1): not using spread ssd allocation scheme [ 542.003868][ T8966] BTRFS info (device loop1): using free space tree [ 542.313467][ T28] audit: type=1800 audit(1793942813.394:103): pid=8966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.741" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 542.656245][ T5787] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 546.462610][ C0] net_ratelimit: 24 callbacks suppressed [ 547.081974][ T9034] loop1: detected capacity change from 0 to 512 [ 547.096390][ T9034] EXT4-fs: Ignoring removed i_version option [ 547.140450][ T9034] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 547.190468][ T9034] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.754: invalid indirect mapped block 4294967295 (level 1) [ 547.255435][ T9034] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.754: invalid indirect mapped block 4294967295 (level 1) [ 547.351010][ T9034] EXT4-fs (loop1): 2 truncates cleaned up [ 547.393178][ T9034] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 548.626433][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.269241][ T9059] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 549.303174][ T9060] qnx4: no qnx4 filesystem (no root dir). [ 549.349167][ T9059] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 551.795487][ C0] net_ratelimit: 26 callbacks suppressed [ 555.495620][ T9122] loop2: detected capacity change from 0 to 512 [ 555.528632][ T9122] EXT4-fs: Ignoring removed i_version option [ 555.537470][ T9123] qnx4: no qnx4 filesystem (no root dir). [ 555.579135][ T9122] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 557.244600][ C0] net_ratelimit: 23 callbacks suppressed [ 557.297996][ T9122] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.764: invalid indirect mapped block 4294967295 (level 1) [ 557.438811][ T9122] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.764: invalid indirect mapped block 4294967295 (level 1) [ 557.542018][ T9122] EXT4-fs (loop2): 2 truncates cleaned up [ 557.559648][ T9122] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 557.779386][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 559.406005][ T9159] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 561.367690][ T9172] qnx4: no qnx4 filesystem (no root dir). [ 561.886048][ T9179] loop0: detected capacity change from 0 to 512 [ 561.895306][ T9179] EXT4-fs: Ignoring removed i_version option [ 561.912869][ T9179] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 561.976600][ T9179] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.785: invalid indirect mapped block 4294967295 (level 1) [ 562.158925][ T9179] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.785: invalid indirect mapped block 4294967295 (level 1) [ 562.190962][ T9179] EXT4-fs (loop0): 2 truncates cleaned up [ 562.198407][ T9179] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 562.326751][ C1] net_ratelimit: 29 callbacks suppressed [ 562.490088][ T9183] loop2: detected capacity change from 0 to 4096 [ 562.708335][ T9183] EXT4-fs: Ignoring removed orlov option [ 562.769895][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.786834][ T9183] EXT4-fs (loop2): Test dummy encryption mode enabled [ 563.174283][ T9183] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 563.375355][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.426811][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.759509][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.979045][ T9203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.787'. [ 564.449358][ T9211] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 567.651500][ T9229] loop4: detected capacity change from 0 to 4096 [ 567.668805][ T9229] EXT4-fs: Ignoring removed orlov option [ 567.718206][ T9229] EXT4-fs (loop4): Test dummy encryption mode enabled [ 567.765753][ T9229] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 567.778705][ C1] net_ratelimit: 34 callbacks suppressed [ 568.705553][ T7916] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.152594][ T9256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.803'. [ 569.582027][ T9263] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 572.798577][ T9288] loop1: detected capacity change from 0 to 4096 [ 572.886764][ C0] net_ratelimit: 29 callbacks suppressed [ 573.333160][ T9288] EXT4-fs: Ignoring removed orlov option [ 573.463147][ T9288] EXT4-fs (loop1): Test dummy encryption mode enabled [ 573.542807][ T9288] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 573.901655][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.527599][ T9318] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 574.760848][ T9319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.812'. [ 578.006741][ C0] net_ratelimit: 26 callbacks suppressed [ 578.551302][ T9343] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 578.560844][ T9343] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 580.607825][ T9361] qnx4: no qnx4 filesystem (no root dir). [ 581.397324][ T9376] netlink: 4 bytes leftover after parsing attributes in process `syz.4.825'. [ 583.027191][ C1] net_ratelimit: 32 callbacks suppressed [ 583.310291][ T9391] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 583.319318][ T9391] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 585.010491][ T9406] loop2: detected capacity change from 0 to 512 [ 585.193852][ T9406] EXT4-fs (loop2): Test dummy encryption mode enabled [ 585.237164][ T9406] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 585.357091][ T9406] EXT4-fs error (device loop2): ext4_orphan_get:1434: comm syz.2.834: bad orphan inode 131083 [ 585.514235][ T9410] qnx4: no qnx4 filesystem (no root dir). [ 585.522328][ T9406] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 585.917775][ T9406] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 585.998590][ T9406] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 586.556607][ T9421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.838'. [ 586.595127][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.047253][ C1] net_ratelimit: 25 callbacks suppressed [ 588.494716][ T9431] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 588.643491][ T9435] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 588.652686][ T9435] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 590.022969][ T9447] loop4: detected capacity change from 0 to 512 [ 590.206253][ T9447] EXT4-fs (loop4): Test dummy encryption mode enabled [ 590.213231][ T9447] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 590.553931][ T9447] EXT4-fs error (device loop4): ext4_orphan_get:1434: comm syz.4.847: bad orphan inode 131083 [ 590.788348][ T9447] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 590.873071][ T9456] loop0: detected capacity change from 0 to 64 [ 590.942893][ T9447] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 590.983410][ T9447] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 591.250860][ T7916] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.321483][ T9456] minix-fs error: zone size must equal block size. s_log_zone_size > 0 is not supported. [ 591.505419][ T9456] MINIX-fs: bad superblock [ 593.301536][ C0] net_ratelimit: 38 callbacks suppressed [ 594.424111][ T9481] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 594.433096][ T9481] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 598.726814][ C1] net_ratelimit: 26 callbacks suppressed [ 599.311305][ T9500] netlink: 16 bytes leftover after parsing attributes in process `syz.0.858'. [ 599.921016][ T9509] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 599.930232][ T9509] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 603.795522][ C1] net_ratelimit: 33 callbacks suppressed [ 608.960986][ T28] audit: type=1400 audit(1793942879.094:104): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="p" pid=9537 comm="syz.2.873" name="p" offset=79 [ 608.966942][ C0] net_ratelimit: 29 callbacks suppressed [ 609.929960][ T9543] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 609.938961][ T9543] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 610.180697][ T8892] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 610.195281][ T8892] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 610.204302][ T8892] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 610.222798][ T8892] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 610.231433][ T8892] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 610.239188][ T8892] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 611.492218][ T9547] rxe_eth0 speed is unknown, defaulting to 1000 [ 612.151339][ T9556] gtp0: entered promiscuous mode [ 612.350635][ T8892] Bluetooth: hci4: command tx timeout [ 613.822545][ T1151] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.108366][ T9001] net_ratelimit: 30 callbacks suppressed [ 614.375939][ T1151] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.406893][ T8892] Bluetooth: hci4: command tx timeout [ 616.650623][ T8892] Bluetooth: hci4: command tx timeout [ 617.138775][ T1151] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.422793][ T1151] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.002879][ T9588] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 618.011953][ T9588] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 618.726822][ T52] Bluetooth: hci4: command tx timeout [ 619.608566][ T1108] net_ratelimit: 33 callbacks suppressed [ 619.668495][ T9547] chnl_net:caif_netlink_parms(): no params data found [ 621.682077][ T9612] loop4: detected capacity change from 0 to 4096 [ 621.850451][ T9612] NILFS (loop4): invalid segment: Checksum error in segment payload [ 621.896580][ T9612] NILFS (loop4): trying rollback from an earlier position [ 621.918471][ T9612] NILFS (loop4): recovery complete [ 622.016919][ T9617] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 622.897080][ T972] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 623.067337][ T9547] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.074559][ T9547] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.125708][ T972] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 623.166347][ T9547] bridge_slave_0: entered allmulticast mode [ 623.174913][ T9547] bridge_slave_0: entered promiscuous mode [ 623.179658][ T972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.217604][ T972] usb 5-1: Product: syz [ 623.221887][ T972] usb 5-1: Manufacturer: syz [ 623.226527][ T972] usb 5-1: SerialNumber: syz [ 623.293807][ T972] usb 5-1: config 0 descriptor?? [ 624.730132][ C1] net_ratelimit: 27 callbacks suppressed [ 625.593823][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.600486][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.617603][ T972] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: failure sending bit rate [ 625.647165][ T972] RobotFuzz Open Source InterFace, OSIF: probe of 5-1:0.0 failed with error -110 [ 625.688185][ T9547] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.695387][ T9547] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.793015][ T9547] bridge_slave_1: entered allmulticast mode [ 625.833268][ T9547] bridge_slave_1: entered promiscuous mode [ 625.860058][ T5889] usb 5-1: USB disconnect, device number 3 [ 626.605539][ T9547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 626.960937][ T9547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 628.695256][ T9547] team0: Port device team_slave_0 added [ 628.963654][ T9547] team0: Port device team_slave_1 added [ 629.124260][ T9644] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 629.133304][ T9644] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 629.374883][ T9648] netlink: 20 bytes leftover after parsing attributes in process `syz.0.891'. [ 629.393950][ T9547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 629.415799][ T9547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 629.477119][ T9547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 629.552468][ T9547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 629.563002][ T9547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 629.643805][ T9547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 629.859139][ T9652] loop2: detected capacity change from 0 to 8 [ 630.552153][ T9663] SQUASHFS error: Unable to read directory block [631:26] [ 630.566735][ C1] net_ratelimit: 38 callbacks suppressed [ 630.581384][ T9663] SQUASHFS error: Failed to read block 0x4de: -5 [ 630.590952][ T9663] SQUASHFS error: Failed to read block 0x4de: -5 [ 630.620238][ T9663] SQUASHFS error: Failed to read block 0x4de: -5 [ 630.628057][ T9663] SQUASHFS error: Failed to read block 0x4de: -5 [ 630.635447][ T9663] SQUASHFS error: Failed to read block 0x4de: -5 [ 630.642836][ T9663] SQUASHFS error: Failed to read block 0x4de: -5 [ 630.650345][ T9663] SQUASHFS error: Failed to read block 0x4de: -5 [ 630.657134][ T9663] SQUASHFS error: Failed to read block 0x4de: -5 [ 630.664491][ T9663] SQUASHFS error: Failed to read block 0x4de: -5 [ 630.671717][ T9663] SQUASHFS error: Failed to read block 0x4de: -5 [ 630.679099][ T9663] SQUASHFS error: Failed to read block 0x4de: -5 [ 630.692494][ T9663] SQUASHFS error: Failed to read block 0x4de: -5 [ 630.699963][ T9663] SQUASHFS error: Failed to read block 0x4de: -5 [ 630.707415][ T9663] SQUASHFS error: Failed to read block 0x4de: -5 [ 630.721533][ T9663] SQUASHFS error: Failed to read block 0x4de: -5 [ 630.729037][ T9663] SQUASHFS error: Failed to read block 0x4de: -5 [ 630.736534][ T9663] SQUASHFS error: Failed to read block 0x4de: -5 [ 630.744182][ T9663] SQUASHFS error: Failed to read block 0x4de: -5 [ 630.752198][ T9663] SQUASHFS error: Failed to read block 0x4de: -5 [ 630.759765][ T9663] SQUASHFS error: Failed to read block 0x4de: -5 [ 630.837814][ T9663] SQUASHFS error: Failed to read block 0x4de: -5 [ 630.844518][ T9663] SQUASHFS error: Failed to read block 0x4de: -5 [ 630.851195][ T9663] SQUASHFS error: Failed to read block 0x4de: -5 [ 630.857936][ T9663] SQUASHFS error: Failed to read block 0x4de: -5 [ 630.864582][ T9663] SQUASHFS error: Failed to read block 0x4de: -5 [ 630.884571][ T9663] SQUASHFS error: Failed to read block 0x4de: -5 [ 630.891338][ T9663] SQUASHFS error: Failed to read block 0x4de: -5 [ 630.898056][ T9663] SQUASHFS error: Failed to read block 0x4de: -5 [ 630.904698][ T9663] SQUASHFS error: Failed to read block 0x4de: -5 [ 630.911402][ T9663] SQUASHFS error: Failed to read block 0x4de: -5 [ 631.017812][ T28] audit: type=1800 audit(1793942901.684:105): pid=9663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.892" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 631.378770][ T9666] loop4: detected capacity change from 0 to 128 [ 631.451124][ T9666] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 631.649600][ T9547] hsr_slave_0: entered promiscuous mode [ 631.722032][ T9547] hsr_slave_1: entered promiscuous mode [ 631.777144][ T9547] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 631.811821][ T9547] Cannot create hsr debugfs directory [ 632.466477][ T1151] hsr_slave_0: left promiscuous mode [ 632.513911][ T1151] hsr_slave_1: left promiscuous mode [ 632.559959][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 632.579866][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 632.634526][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 632.676744][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 632.724045][ T1151] batadv0: left allmulticast mode [ 632.731787][ T1151] batadv0: left promiscuous mode [ 632.753701][ T1151] bridge0: port 3(batadv0) entered disabled state [ 632.788662][ T1151] bridge_slave_1: left allmulticast mode [ 632.813152][ T1151] bridge_slave_1: left promiscuous mode [ 632.835188][ T1151] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.916979][ T1151] bridge_slave_0: left allmulticast mode [ 632.922783][ T1151] bridge_slave_0: left promiscuous mode [ 632.940718][ T1151] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.082505][ T1151] veth1_macvtap: left promiscuous mode [ 633.094983][ T1151] veth0_macvtap: left promiscuous mode [ 633.110829][ T1151] veth1_vlan: left promiscuous mode [ 633.125229][ T1151] veth0_vlan: left promiscuous mode [ 635.846744][ C1] net_ratelimit: 28 callbacks suppressed [ 636.398240][ T1151] team0 (unregistering): Port device team_slave_1 removed [ 636.537107][ T1151] team0 (unregistering): Port device team_slave_0 removed [ 636.675083][ T1151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 636.798344][ T1151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 640.079775][ T1151] bond0 (unregistering): Released all slaves [ 640.258759][ T9690] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 640.267810][ T9690] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 641.366766][ C1] net_ratelimit: 18 callbacks suppressed [ 643.334563][ T9547] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 643.434662][ T9547] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 643.452853][ T1151] IPVS: stop unused estimator thread 0... [ 643.502909][ T9547] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 643.564002][ T9547] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 644.065367][ T9547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 644.162207][ T9547] 8021q: adding VLAN 0 to HW filter on device team0 [ 644.206725][ T770] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.214003][ T770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 644.234325][ T770] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.242691][ T770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 644.529619][ T9784] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 644.538604][ T9784] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 644.643963][ T9762] loop0: detected capacity change from 0 to 40427 [ 644.682074][ T9762] F2FS-fs (loop0): Mismatch start address, segment0(0) cp_blkaddr(512) [ 644.694597][ T9762] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 644.754254][ T9762] F2FS-fs (loop0): build fault injection attr: rate: 11, type: 0x7ffff [ 644.849626][ T9762] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x7698c [ 644.890274][ T9762] F2FS-fs (loop0): invalid crc value [ 644.934899][ T9762] F2FS-fs (loop0): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_bio+0x135/0x650 [ 644.975604][ T9762] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-117) [ 645.358388][ T9547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 647.126796][ C0] net_ratelimit: 17 callbacks suppressed [ 647.933985][ T9547] veth0_vlan: entered promiscuous mode [ 647.949857][ T9841] kvm: user requested TSC rate below hardware speed [ 648.019011][ T9547] veth1_vlan: entered promiscuous mode [ 648.113872][ T9844] qnx4: no qnx4 filesystem (no root dir). [ 648.871874][ T9547] veth0_macvtap: entered promiscuous mode [ 648.942990][ T9547] veth1_macvtap: entered promiscuous mode [ 649.013868][ T9547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 649.046957][ T9547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.067191][ T9547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 649.092974][ T9547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.108517][ T9547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 649.127153][ T9547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.176912][ T9547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 649.203940][ T9850] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 649.214238][ T9850] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 649.236858][ T9547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 649.273504][ T9547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.303522][ T9547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 649.340308][ T9547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.352902][ T9547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 649.389305][ T9547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.413824][ T9547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 650.358408][ T9547] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.416770][ T9547] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.425569][ T9547] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.506790][ T9547] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.795105][ T28] audit: type=1326 audit(1793942921.874:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9868 comm="syz.0.948" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbec519fb19 code=0x7ffc0000 [ 650.853758][ T28] audit: type=1326 audit(1793942921.904:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9868 comm="syz.0.948" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbec519fb19 code=0x7ffc0000 [ 650.880445][ T9869] loop0: detected capacity change from 0 to 2048 [ 650.887147][ T28] audit: type=1326 audit(1793942921.904:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9868 comm="syz.0.948" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbec519fb19 code=0x7ffc0000 [ 650.887230][ T28] audit: type=1326 audit(1793942921.904:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9868 comm="syz.0.948" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbec519fb19 code=0x7ffc0000 [ 650.955810][ T28] audit: type=1326 audit(1793942921.904:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9868 comm="syz.0.948" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fbec519fb19 code=0x7ffc0000 [ 650.983527][ T28] audit: type=1326 audit(1793942921.904:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9868 comm="syz.0.948" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbec519f882 code=0x7ffc0000 [ 651.007971][ T28] audit: type=1326 audit(1793942921.924:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9868 comm="syz.0.948" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbec516034e code=0x7ffc0000 [ 651.032248][ T28] audit: type=1326 audit(1793942921.964:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9868 comm="syz.0.948" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fbec519f947 code=0x7ffc0000 [ 651.064417][ T28] audit: type=1326 audit(1793942921.964:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9868 comm="syz.0.948" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbec516034e code=0x7ffc0000 [ 651.120502][ T28] audit: type=1326 audit(1793942921.964:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9868 comm="syz.0.948" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbec519f7ab code=0x7ffc0000 [ 651.160295][ T9869] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 651.172891][ T9873] qnx4: no qnx4 filesystem (no root dir). [ 651.202133][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 651.230929][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 651.415332][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 651.476503][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 651.597755][ T9880] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 651.607681][ T9880] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 652.246774][ C0] net_ratelimit: 58 callbacks suppressed [ 653.221200][ T9891] netlink: 16 bytes leftover after parsing attributes in process `syz.5.874'. [ 654.720443][ T9922] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 654.731374][ T9922] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 654.830616][ T9923] qnx4: no qnx4 filesystem (no root dir). [ 655.048720][ T9927] loop0: detected capacity change from 0 to 2048 [ 655.104216][ T9927] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 655.926732][ T9937] netlink: 16 bytes leftover after parsing attributes in process `syz.0.964'. [ 656.736170][ T9951] qnx4: no qnx4 filesystem (no root dir). [ 657.296725][ C1] net_ratelimit: 49 callbacks suppressed [ 659.765047][ T28] kauditd_printk_skb: 59 callbacks suppressed [ 659.765097][ T28] audit: type=1400 audit(1793942929.794:175): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="p" pid=9957 comm="syz.4.969" name="p" offset=79 [ 660.387493][ T9976] qnx4: no qnx4 filesystem (no root dir). [ 661.371112][ T9990] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 661.380432][ T9990] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 662.486765][ C0] net_ratelimit: 22 callbacks suppressed [ 666.121916][ T28] audit: type=1400 audit(1793942936.144:176): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="p" pid=10013 comm="syz.5.981" name="p" offset=79 [ 668.077163][ C1] net_ratelimit: 44 callbacks suppressed [ 668.617112][T10038] (null): rxe_set_mtu: Set mtu to 1024 [ 669.916793][T10038] infiniband syz1: set active [ 669.921856][T10038] infiniband syz1: added bond0 [ 670.114871][T10038] RDS/IB: syz1: added [ 671.732871][T10038] smc: adding ib device syz1 with port count 1 [ 671.747993][ T28] audit: type=1400 audit(1793942941.784:177): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="p" pid=10051 comm="syz.0.991" name="p" offset=79 [ 671.783049][T10038] smc: ib device syz1 port 1 has pnetid [ 673.366756][ C1] net_ratelimit: 28 callbacks suppressed [ 673.690770][ T5889] [ 673.693187][ T5889] ====================================================== [ 673.700240][ T5889] WARNING: possible circular locking dependency detected [ 673.707314][ T5889] syzkaller #0 Not tainted [ 673.711766][ T5889] ------------------------------------------------------ [ 673.718822][ T5889] kworker/0:6/5889 is trying to acquire lock: [ 673.724935][ T5889] ffffffff8f61e8d0 (rds_trans_sem){++++}-{3:3}, at: rds_trans_get_preferred+0x133/0x3b0 [ 673.734761][ T5889] [ 673.734761][ T5889] but task is already holding lock: [ 673.742166][ T5889] ffff888073ea1420 (&id_priv->handler_mutex/1){+.+.}-{3:3}, at: cma_ib_req_handler+0x2dd4/0x50b0 [ 673.742808][ C1] virtqueue callback for ffff888022e48600 (ffffffff85c2c4f0) [ 673.752786][ T5889] [ 673.752786][ T5889] which lock already depends on the new lock. [ 673.752786][ T5889] [ 673.752797][ T5889] [ 673.752797][ T5889] the existing dependency chain (in reverse order) is: [ 673.760501][ C1] No more buffers in queue [ 673.770595][ T5889] [ 673.770595][ T5889] -> #2 (&id_priv->handler_mutex/1){+.+.}-{3:3} [ 673.779754][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 673.784094][ T5889] : [ 673.784103][ T5889] __mutex_lock+0x135/0xce0 [ 673.792622][ C1] No more buffers in queue [ 673.798338][ T5889] cma_ib_req_handler+0x2dd4/0x50b0 [ 673.798375][ T5889] cm_process_work+0x4b/0x410 [ 673.802634][ T1108] rxe0: qp#16 rxe_receiver: state = CLEANUP [ 673.805859][ T5889] cm_work_handler+0x9bbe/0xea50 [ 673.811276][ T1108] rxe0: qp#16 rxe_receiver: state = DONE [ 673.816015][ T5889] process_scheduled_works+0xa60/0x1600 [ 673.824752][ T5775] No more buffers in queue [ 673.827129][ T5889] worker_thread+0xa5e/0xfe0 [ 673.827161][ T5889] kthread+0x2fa/0x390 [ 673.827181][ T5889] ret_from_fork+0x48/0x80 [ 673.832685][ T5775] eth0: xmit ffff88807cf02000 42:01:0a:80:00:01 [ 673.838347][ T5889] ret_from_fork_asm+0x11/0x20 [ 673.838379][ T5889] [ 673.838379][ T5889] -> #1 ( [ 673.844469][ T5775] Added buffer head 11 to ffff888022e48800 [ 673.844548][ C1] virtqueue callback for ffff888022e48800 (ffffffff85c2c5e0) [ 673.848890][ T5889] &id_priv->handler_mutex){+.+.}-{3:3}: [ 673.858621][ T5889] __mutex_lock+0x135/0xce0 [ 673.858644][ T5889] rdma_destroy_id+0x1b/0x30 [ 673.863862][ C1] Sent skb ffff88807cf02000 [ 673.869898][ T5889] rds_ib_laddr_check+0x3e1/0x6b0 [ 673.869924][ T5889] rds_trans_get_preferred+0x173/0x3b0 [ 673.875333][ C1] No more buffers in queue [ 673.880403][ T5889] rds_bind+0x690/0x870 [ 673.880445][ T5889] __sys_bind+0x2f0/0x3f0 [ 673.904431][ T1108] rxe0: qp#16 rxe_receiver: state = GET_REQ [ 673.909426][ T5889] __x64_sys_bind+0x7a/0x90 [ 673.909450][ T5889] do_syscall_64+0x55/0xb0 [ 673.909475][ T5889] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 673.909502][ T5889] [ 673.909502][ T5889] -> #0 (rds_trans_sem){++++}-{3:3}: [ 673.909532][ T5889] __lock_acquire+0x3a07/0x7eb0 [ 673.909556][ T5889] lock_acquire+0x19e/0x420 [ 673.909579][ T5889] down_read+0x46/0x2e0 [ 673.909604][ T5889] rds_trans_get_preferred+0x133/0x3b0 [ 673.909633][ T5889] __rds_conn_create+0xa1e/0x1fe0 [ 673.949767][ T1108] rxe0: qp#16 rxe_receiver: state = EXIT [ 673.951176][ T5889] rds_conn_create+0x43/0x60 [ 673.956257][ T1108] rxe0: qp#16 rxe_completer: state = GET ACK [ 673.962549][ T5889] rds_ib_cm_handle_connect+0x478/0x10d0 [ 673.962574][ T5889] rds_rdma_cm_event_handler_cmn+0x680/0xa20 [ 673.962592][ T5889] cma_cm_event_handler+0xa6/0x290 [ 673.962620][ T5889] cma_ib_req_handler+0x3435/0x50b0 [ 673.962647][ T5889] cm_process_work+0x4b/0x410 [ 673.962662][ T5889] cm_work_handler+0x9bbe/0xea50 [ 673.962691][ T5889] process_scheduled_works+0xa60/0x1600 [ 673.962717][ T5889] worker_thread+0xa5e/0xfe0 [ 673.962741][ T5889] kthread+0x2fa/0x390 [ 673.962760][ T5889] ret_from_fork+0x48/0x80 [ 673.962784][ T5889] ret_from_fork_asm+0x11/0x20 [ 673.962810][ T5889] [ 673.962810][ T5889] other info that might help us debug this: [ 673.962810][ T5889] [ 673.962817][ T5889] Chain exists of: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 673.962817][ T5889] rds_trans_sem --> &id_priv->handler_mutex --> &id_priv->handler_mutex/1 [ 673.962817][ T5889] [ 673.962858][ T5889] Possible unsafe locking scenario: [ 673.962858][ T5889] [ 673.962864][ T5889] CPU0 CPU1 [ 673.962870][ T5889] ---- ---- [ 673.962875][ T5889] lock(&id_priv->handler_mutex/1); [ 673.962894][ T5889] lock(&id_priv->handler_mutex); [ 673.962910][ T5889] lock(&id_priv->handler_mutex/1); [ 673.962929][ T5889] rlock(rds_trans_sem [ 674.007166][ C1] wireguard: wg2: Handshake for peer 24 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 19) [ 674.007941][ T5889] ); [ 674.007949][ T5889] [ 674.007949][ T5889] *** DEADLOCK *** [ 674.007949][ T5889] [ 674.093933][ T1108] rxe0: qp#16 rxe_completer: state = GET WQE [ 674.099744][ T5889] 4 locks held by kworker/0:6/5889: [ 674.099759][ T5889] #0: ffff88802b0fbd38 ((wq_completion)ib_cm){+.+.}-{0:0} [ 674.116441][ T5774] No more buffers in queue [ 674.118039][ T5889] , at: process_scheduled_works+0x975/0x1600 [ 674.118074][ T5889] #1: ffffc9000488fd00 ((work_completion)(&(&work->work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 674.123464][ T5774] eth0: xmit ffff88801c7c8af0 42:01:0a:80:00:01 [ 674.131128][ T5889] #2: ffff8880337c9420 (&id_priv->handler_mutex){+.+.}-{3:3}, at: cma_ib_req_handler+0x2186/0x50b0 [ 674.139140][ T5774] Added buffer head 11 to ffff888022e48800 [ 674.139241][ C1] virtqueue callback for ffff888022e48800 (ffffffff85c2c5e0) [ 674.143178][ T5889] #3: ffff888073ea1420 (&id_priv->handler_mutex/1){+.+.}-{3:3}, at: cma_ib_req_handler+0x2dd4/0x50b0 [ 674.166053][ C1] Sent skb ffff88801c7c8af0 [ 674.166109][ C1] virtqueue callback for ffff888022e48600 (ffffffff85c2c4f0) [ 674.171541][ T5889] [ 674.171541][ T5889] stack backtrace: [ 674.171551][ T5889] CPU: 0 PID: 5889 Comm: kworker/0:6 Not tainted syzkaller #0 [ 674.183956][ T5889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 674.188472][ C1] No more buffers in queue [ 674.194370][ T5889] Workqueue: ib_cm cm_work_handler [ 674.206957][ C1] No more buffers in queue [ 674.213143][ T5889] [ 674.213154][ T5889] Call Trace: [ 674.224166][ C1] Receiving skb proto 0x0806 len 28 type 1 [ 674.229731][ T5889] [ 674.229744][ T5889] dump_stack_lvl+0x18c/0x250 [ 674.237287][ C1] No more buffers in queue [ 674.248114][ T5889] ? load_image+0x420/0x420 [ 674.248153][ T5889] ? show_regs_print_info+0x20/0x20 [ 674.252686][ C1] Added buffer head 828 to ffff888022e48600 [ 674.260068][ T5889] ? print_circular_bug+0x12b/0x1a0 [ 674.260119][ T5889] check_noncircular+0x2fc/0x400 [ 674.266133][ C1] Added buffer head 827 to ffff888022e48600 [ 674.273597][ T5889] ? print_deadlock_bug+0x5d0/0x5d0 [ 674.273641][ T5889] ? lockdep_lock+0xf5/0x230 [ 674.283868][ C1] Added buffer head 826 to ffff888022e48600 [ 674.288138][ T5889] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 674.293294][ C1] Added buffer head 825 to ffff888022e48600 [ 674.297726][ T5889] ? _find_first_zero_bit+0xd6/0x100 [ 674.297765][ T5889] __lock_acquire+0x3a07/0x7eb0 [ 674.300112][ C1] Added buffer head 824 to ffff888022e48600 [ 674.303417][ T5889] ? kasan_set_track+0x4e/0x70 [ 674.309344][ C1] Added buffer head 823 to ffff888022e48600 [ 674.312181][ T5889] ? rds_cong_from_addr+0x34e/0x360 [ 674.316939][ C1] Added buffer head 822 to ffff888022e48600 [ 674.321294][ T5889] ? rds_conn_create+0x43/0x60 [ 674.325866][ C1] Added buffer head 821 to ffff888022e48600 [ 674.331073][ T5889] ? cm_work_handler+0x9bbe/0xea50 [ 674.331110][ T5889] ? process_scheduled_works+0xa60/0x1600 [ 674.337079][ C1] Added buffer head 820 to ffff888022e48600 [ 674.342219][ T5889] ? worker_thread+0xa5e/0xfe0 [ 674.347228][ C1] Added buffer head 819 to ffff888022e48600 [ 674.353065][ T5889] ? ret_from_fork+0x48/0x80 [ 674.358348][ C1] Added buffer head 818 to ffff888022e48600 [ 674.362869][ T5889] ? ret_from_fork_asm+0x11/0x20 [ 674.368844][ C1] Added buffer head 817 to ffff888022e48600 [ 674.374678][ T5889] ? verify_lock_unused+0x140/0x140 [ 674.380680][ C1] Added buffer head 816 to ffff888022e48600 [ 674.385937][ T5889] ? mark_lock+0x94/0x320 [ 674.390856][ C1] Added buffer head 815 to ffff888022e48600 [ 674.396692][ T5889] lock_acquire+0x19e/0x420 [ 674.401483][ C1] Added buffer head 814 to ffff888022e48600 [ 674.407390][ T5889] ? rds_trans_get_preferred+0x133/0x3b0 [ 674.412625][ C1] Added buffer head 813 to ffff888022e48600 [ 674.418522][ T5889] ? kasan_quarantine_put+0xd8/0x220 [ 674.423471][ C1] Added buffer head 812 to ffff888022e48600 [ 674.429233][ T5889] ? __might_sleep+0xe0/0xe0 [ 674.429263][ T5889] ? read_lock_is_recursive+0x20/0x20 [ 674.434385][ C1] Added buffer head 734 to ffff888022e48600 [ 674.440152][ T5889] ? slab_free_freelist_hook+0x154/0x240 [ 674.440182][ T5889] ? do_raw_spin_unlock+0x121/0x230 [ 674.446080][ C1] Added buffer head 733 to ffff888022e48600 [ 674.450848][ T5889] ? __kmem_cache_free+0xba/0x1f0 [ 674.450873][ T5889] down_read+0x46/0x2e0 [ 674.456829][ C1] Added buffer head 732 to ffff888022e48600 [ 674.461382][ T5889] ? rds_trans_get_preferred+0x133/0x3b0 [ 674.467342][ C1] Added buffer head 731 to ffff888022e48600 [ 674.472229][ T5889] rds_trans_get_preferred+0x133/0x3b0 [ 674.478203][ C1] Added buffer head 730 to ffff888022e48600 [ 674.483341][ T5889] __rds_conn_create+0xa1e/0x1fe0 [ 674.489309][ C1] Added buffer head 729 to ffff888022e48600 [ 674.493592][ T5889] ? __rds_conn_create+0x2f3/0x1fe0 [ 674.499641][ C1] Added buffer head 728 to ffff888022e48600 [ 674.504023][ T5889] ? rds_conn_create+0x60/0x60 [ 674.509972][ C1] Added buffer head 727 to ffff888022e48600 [ 674.515581][ T5889] rds_conn_create+0x43/0x60 [ 674.521531][ C1] Added buffer head 726 to ffff888022e48600 [ 674.526824][ T5889] rds_ib_cm_handle_connect+0x478/0x10d0 [ 674.526854][ T5889] ? xas_create+0x14d6/0x1760 [ 674.532753][ C1] Added buffer head 725 to ffff888022e48600 [ 674.537374][ T5889] ? verify_lock_unused+0x140/0x140 [ 674.537411][ T5889] ? rds_ib_cm_connect_complete+0x8c0/0x8c0 [ 674.542824][ C1] Added buffer head 724 to ffff888022e48600 [ 674.548732][ T5889] rds_rdma_cm_event_handler_cmn+0x680/0xa20 [ 674.554386][ C1] Added buffer head 723 to ffff888022e48600 [ 674.559595][ T5889] ? rds_rdma_cm_event_handler+0x20/0x20 [ 674.559621][ T5889] ? trace_cm_event_handler+0x7f/0x1c0 [ 674.565515][ C1] Added buffer head 722 to ffff888022e48600 [ 674.570551][ T5889] ? rds_cmsg_atomic+0xc30/0xc30 [ 674.570575][ T5889] ? cma_listen_handler+0xfb/0x150 [ 674.574736][ C1] Added buffer head 721 to ffff888022e48600 [ 674.580631][ T5889] cma_cm_event_handler+0xa6/0x290 [ 674.580669][ T5889] cma_ib_req_handler+0x3435/0x50b0 [ 674.586304][ C1] Added buffer head 720 to ffff888022e48600 [ 674.592205][ T5889] ? __lock_acquire+0x36dd/0x7eb0 [ 674.597737][ C1] Added buffer head 719 to ffff888022e48600 [ 674.603586][ T5889] ? cma_addr_cmp+0x240/0x240 [ 674.609357][ C1] No more buffers in queue [ 674.614605][ T5889] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 674.619768][ C1] eth0: xmit ffff888029b5e640 42:01:0a:80:00:01 [ 674.625613][ T5889] ? cm_queue_work_unlock+0x54/0x1c0 [ 674.630474][ C1] Added buffer head 11 to ffff888022e48800 [ 674.636284][ C1] virtqueue callback for ffff888022e48800 (ffffffff85c2c5e0) [ 674.636281][ T5889] ? lock_chain_count+0x20/0x20 [ 674.636315][ T5889] cm_process_work+0x4b/0x410 [ 674.644936][ C1] Sent skb ffff888029b5e640 [ 674.646826][ T5889] ? _raw_spin_unlock_irq+0x2e/0x50 [ 674.646860][ T5889] cm_work_handler+0x9bbe/0xea50 [ 674.652557][ C1] No more buffers in queue [ 674.657214][ T5889] ? refcount_inc+0x70/0x70 [ 674.760892][T10038] kobject: 'gid_attrs' (ffff88805ec80008): kobject_add_internal: parent: '1', set: '' [ 674.761576][ T5889] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 674.769907][ T1108] rxe0: qp#16 rxe_completer: state = COMP WQE [ 674.773845][ T5889] ? __lock_acquire+0x7eb0/0x7eb0 [ 674.841475][ T1108] rxe0: qp#16 rxe_completer: state = GET WQE [ 674.841757][ T5889] ? read_lock_is_recursive+0x20/0x20 [ 674.865565][ T5889] ? _raw_spin_unlock_irq+0x23/0x50 [ 674.870911][ T5889] ? process_scheduled_works+0x975/0x1600 [ 674.876692][ T5889] ? process_scheduled_works+0x975/0x1600 [ 674.882483][ T5889] process_scheduled_works+0xa60/0x1600 [ 674.886765][ T1108] rxe0: qp#16 rxe_completer: state = EXIT [ 674.888106][ T5889] ? worker_attach_to_pool+0x370/0x370 [ 674.893811][ T1108] rxe0: qp#16 rxe_completer: state = GET ACK [ 674.899282][ T5889] ? assign_work+0x3cc/0x5d0 [ 674.899316][ T5889] worker_thread+0xa5e/0xfe0 [ 674.914588][ T5889] ? _raw_spin_unlock+0x40/0x40 [ 674.919503][ T5889] ? __kthread_parkme+0x71/0x1c0 [ 674.924506][ T5889] kthread+0x2fa/0x390 [ 674.928623][ T5889] ? pr_cont_work+0x550/0x550 [ 674.933357][ T5889] ? kthread_blkcg+0xd0/0xd0 [ 674.938044][ T5889] ret_from_fork+0x48/0x80 [ 674.942521][ T5889] ? kthread_blkcg+0xd0/0xd0 [ 674.947163][ T5889] ret_from_fork_asm+0x11/0x20 [ 674.951999][ T5889] [ 674.955145][ C0] virtqueue callback for ffff888022e48200 (ffffffff85c2c4f0) [ 674.962643][ C0] virtqueue callback for ffff888146e52400 (ffffffff849b2ec0) [ 674.970120][ C0] virtqueue interrupt with no work for ffff888146e52200 [ 674.977108][ C0] virtqueue interrupt with no work for ffff888146e52000 [ 674.988367][ C0] No more buffers in queue [ 674.992906][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 674.998816][ C0] No more buffers in queue [ 675.005485][ T56] Added buffer head 0 to ffff888146e52400 [ 675.030790][ T5775] No more buffers in queue [ 675.035300][ T5775] eth0: xmit ffff8880272a3770 42:01:0a:80:00:01 [ 675.041643][ T5775] Added buffer head 5 to ffff888022e48400 [ 675.042479][ C1] virtqueue callback for ffff888022e48600 (ffffffff85c2c4f0) [ 675.047490][ C0] virtqueue callback for ffff888022e48400 (ffffffff85c2c5e0) [ 675.054909][ C1] No more buffers in queue [ 675.062315][ C0] Sent skb ffff8880272a3770 [ 675.066655][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 675.071165][ C0] No more buffers in queue [ 675.077005][ C1] No more buffers in queue [ 675.086595][ T1108] rxe0: qp#16 rxe_completer: state = GET WQE [ 675.092670][ T1108] rxe0: qp#16 rxe_completer: state = EXIT [ 675.098534][ T1108] rxe0: qp#16 rxe_completer: state = GET ACK [ 675.104655][ T1108] rxe0: qp#16 rxe_completer: state = GET WQE [ 675.107589][ C0] virtqueue callback for ffff888146e52400 (ffffffff849b2ec0) [ 675.118104][ C0] virtqueue interrupt with no work for ffff888146e52200 [ 675.125086][ C0] virtqueue interrupt with no work for ffff888146e52000 [ 675.140590][ T5889] rxe0: qp#18 rxe_qp_from_attr: state -> INIT [ 675.147046][ T1108] rxe0: qp#16 rxe_completer: state = EXIT [ 675.153255][ T56] Added buffer head 0 to ffff888146e52400 [ 675.213918][ T5889] rxe0: qp#18 rxe_qp_from_attr: state -> INIT [ 675.220187][ T5774] No more buffers in queue [ 675.222926][ T9541] kcov: kcov_task_exit: t = ffff88803360bc00, kcov->t = ffff88803360bc00 [ 675.224639][ T5774] eth0: xmit ffff88801c7c8870 42:01:0a:80:00:01 [ 675.235720][ T7905] kcov: kcov_task_exit: t = ffff888023b35a00, kcov->t = ffff888023b35a00 [ 675.239499][ T5774] Added buffer head 11 to ffff888022e48800 [ 675.239586][ C1] virtqueue callback for ffff888022e48800 (ffffffff85c2c5e0) [ 675.248236][ C0] virtqueue callback for ffff888022e48200 (ffffffff85c2c4f0) [ 675.261395][ C0] No more buffers in queue [ 675.269304][ C1] Sent skb ffff88801c7c8870 [ 675.272975][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 675.277509][ C1] No more buffers in queue [ 675.283330][ C0] virtqueue callback for ffff888022e48200 (ffffffff85c2c4f0) [ 675.295336][ C0] Receiving skb proto 0x0800 len 88 type 0 [ 675.301249][ C0] Receiving skb proto 0x0800 len 112 type 0 [ 675.307257][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 675.313121][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 675.319013][ C0] No more buffers in queue [ 675.323716][ T5785] kcov: kcov_task_exit: t = ffff888031865a00, kcov->t = ffff888031865a00 [ 675.333515][ C0] No more buffers in queue [ 675.338052][ C0] No more buffers in queue [ 675.343631][ T5783] kcov: kcov_task_exit: t = ffff888031861e00, kcov->t = ffff888031861e00 [ 675.365194][ T5889] rxe0: qp#18 rxe_qp_from_attr: state -> RTR [ 675.371477][ T5889] rxe0: qp#18 rxe_qp_from_attr: set resp psn = 0xacb47c [ 675.378552][ T5889] rxe0: qp#18 rxe_qp_from_attr: set min rnr timer = 0xa [ 675.385657][ T5889] rxe0: qp#18 rxe_qp_from_attr: state -> RTS [ 675.391784][ T5889] rxe0: qp#18 rxe_qp_from_attr: set retry count = 1 [ 675.398469][ T5889] rxe0: qp#18 rxe_qp_from_attr: set rnr retry count = 7 [ 675.405464][ T5889] rxe0: qp#18 rxe_qp_from_attr: set req psn = 0x3078dc [ 675.412861][ T1108] rxe0: qp#16 rxe_receiver: state = GET_REQ [ 675.431115][ T5774] No more buffers in queue [ 675.435617][ T5774] eth0: xmit ffff8880303f18c0 42:01:0a:80:00:01 [ 675.441968][ T5774] Added buffer head 5 to ffff888022e48400 [ 675.447751][ C0] virtqueue callback for ffff888022e48400 (ffffffff85c2c5e0) [ 675.455273][ C0] Sent skb ffff8880303f18c0 [ 675.459921][ C0] No more buffers in queue [ 675.469351][T10066] kcov: kcov_start: t = ffff888022401e00, size = 524288, area = ffffc9000bfb9000 [ 675.476746][ T1108] rxe0: qp#16 rxe_receiver: state = CHK_PSN [ 675.484718][ T1108] rxe0: qp#16 rxe_receiver: state = CHK_OP_SEQ [ 675.576666][ T1108] rxe0: qp#16 rxe_receiver: state = CHK_OP_VALID [ 675.583106][ T1108] rxe0: qp#16 rxe_receiver: state = CHK_RESOURCE [ 675.631478][ T1108] rxe0: qp#16 rxe_receiver: state = CHK_LENGTH [ 675.649523][T10067] kcov: kcov_start: t = ffff888029ef0000, size = 524288, area = ffffc90018c00000 [ 675.686690][ T1108] rxe0: qp#16 rxe_receiver: state = EXECUTE [ 675.692711][ T1108] rxe0: qp#16 rxe_receiver: state = COMPLETE [ 675.708273][ T5772] No more buffers in queue [ 675.712799][ T5772] eth0: xmit ffff8880272a34f0 42:01:0a:80:00:01 [ 675.719183][ T5772] Added buffer head 5 to ffff888022e48400 [ 675.724945][ C0] virtqueue callback for ffff888022e48200 (ffffffff85c2c4f0) [ 675.724979][ C0] virtqueue callback for ffff888022e48400 (ffffffff85c2c5e0) [ 675.739973][ C0] Sent skb ffff8880272a34f0 [ 675.744534][ C0] No more buffers in queue [ 675.749051][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 675.749085][ T1108] rxe0: qp#16 rxe_receiver: state = CLEANUP [ 675.754896][ C0] No more buffers in queue [ 675.766726][ C0] No more buffers in queue [ 675.772071][T10069] kcov: kcov_start: t = ffff88807e5cbc00, size = 524288, area = ffffc90019001000 [ 675.791685][T10069] MPTCP: sched=default [ 675.799290][T10069] MPTCP: subflow=ffff88814c11a400 [ 675.804422][T10069] MPTCP: subflow=ffff88814c11a400, family=2 [ 675.810448][T10069] MPTCP: subflow=ffff88814c11a400 [ 675.815840][T10069] MPTCP: ssk=ffff888077582580, local_key=6241392689233674428, token=1827909274, idsn=10062599491152441622 [ 675.829133][ C1] nf_nat: Already setup manip DST for ct ffff88802fb1e780 (status bits 0x188) [ 675.838097][ C1] nf_nat: Already setup manip SRC for ct ffff88802fb1e780 (status bits 0x188) [ 675.848876][T10069] MPTCP: msk=ffff88805b0cb100 [ 675.853925][T10069] MPTCP: msk=ffff88805b0cb100 [ 675.882060][ T27] rxe0: qp#17 rxe_qp_from_attr: state -> INIT [ 675.890107][ T27] rxe0: qp#17 rxe_qp_from_attr: state -> RTR [ 675.916696][T10066] kcov: kcov_task_exit: t = ffff888022401e00, kcov->t = ffff888022401e00 [ 675.925582][T10069] kcov: kcov_task_exit: t = ffff88807e5cbc00, kcov->t = ffff88807e5cbc00 [ 675.936335][ T27] rxe0: qp#17 rxe_qp_from_attr: set resp psn = 0x3078dc [ 675.943431][ T27] rxe0: qp#17 rxe_qp_from_attr: set min rnr timer = 0xa [ 675.950489][ T27] rxe0: qp#17 rxe_qp_from_attr: state -> RTS [ 675.956509][ T27] rxe0: qp#17 rxe_qp_from_attr: set retry count = 1 [ 675.963221][ T27] rxe0: qp#17 rxe_qp_from_attr: set rnr retry count = 7 [ 675.970316][ T27] rxe0: qp#17 rxe_qp_from_attr: set req psn = 0xacb47c [ 676.009760][ T27] RDS/IB: Active conn connected <::ffff:172.20.20.170,::ffff:172.20.20.170,0> version 3.1 [ 676.057152][ T1108] rxe0: qp#16 rxe_receiver: state = DONE [ 676.062883][ T1108] rxe0: qp#16 rxe_receiver: state = GET_REQ [ 676.107521][ C0] virtqueue callback for ffff888146e52400 (ffffffff849b2ec0) [ 676.115000][ C0] virtqueue interrupt with no work for ffff888146e52200 [ 676.121989][ C0] virtqueue interrupt with no work for ffff888146e52000 [ 676.146990][T10067] kcov: kcov_task_exit: t = ffff888029ef0000, kcov->t = ffff888029ef0000 [ 676.158583][ T1108] rxe0: qp#16 rxe_receiver: state = EXIT [ 676.164303][ T1108] rxe0: qp#16 rxe_completer: state = GET ACK [ 676.189126][T10038] device: 'syz1': device_add [ 676.193828][T10038] kobject: 'syz1' (ffff88802bcb4000): kobject_add_internal: parent: 'infiniband', set: 'devices' [ 676.196078][ T9133] Added buffer head 0 to ffff888146e52400 [ 676.248901][ T1108] rxe0: qp#16 rxe_completer: state = GET WQE [ 676.254977][ T1108] rxe0: qp#16 rxe_completer: state = COMP WQE [ 676.306748][T10038] infiniband syz1: No ACPI support [ 676.312477][T10038] PM: Adding info for No Bus:syz1 [ 676.330463][ T1108] rxe0: qp#16 rxe_completer: state = GET WQE [ 676.336534][ T1108] rxe0: qp#16 rxe_completer: state = EXIT [ 676.389021][T10038] kobject: 'syz1' (ffff88802bcb4000): kobject_uevent_env [ 676.396203][T10038] kobject: 'syz1' (ffff88802bcb4000): fill_kobj_path: path = '/devices/virtual/infiniband/syz1' [ 676.425881][T10067] ffff8880605c8000 name hci3 bus 0 [ 676.427176][ T1108] rxe0: qp#16 rxe_receiver: state = GET_REQ [ 676.457472][T10067] hci3: err 0x13 [ 676.461108][T10067] hci3 ffff8880605c8000 [ 676.465315][T10067] hci3: [ 676.469489][T10067] hci3: err 0x13 [ 676.473104][T10067] hci3: cancelling interleave scan [ 676.478362][T10067] hci3 state 0 -> 0 [ 676.482237][T10067] All LE pending actions cleared [ 676.487311][T10067] hdev hci3 [ 676.490460][T10067] hcon ffff888054cee000 reason 22 [ 676.495528][T10067] hcon ffff888054cee000 conn ffff88802540b800, err 103 [ 676.496768][ T1108] rxe0: qp#16 rxe_receiver: state = CHK_PSN [ 676.502600][T10067] hci3 hcon ffff888054cee000 chan ffff88807af9f700 [ 676.515182][T10038] kobject: 'ports' (ffff88807d234980): kobject_add_internal: parent: 'syz1', set: '' [ 676.543650][T10067] hci3 hcon ffff888054cee000 handle 201 [ 676.551046][T10067] hci3: hcon ffff888054cee000 [ 676.551134][ T1108] rxe0: qp#16 rxe_receiver: state = CHK_OP_SEQ [ 676.555777][T10067] hcon ffff888054cee000 [ 676.578045][T10038] kobject: '1' (ffff888067f20000): kobject_add_internal: parent: 'ports', set: '' [ 676.591222][T10067] hci3: conn ffff888054cee000 [ 676.595979][T10067] device: 'hci3:201': device_unregister [ 676.601650][T10067] kernfs runtime_status: removing [ 676.606817][T10067] kernfs control: removing [ 676.611319][T10067] kernfs runtime_suspended_time: removing [ 676.616820][ T1108] rxe0: qp#16 rxe_receiver: state = CHK_OP_VALID [ 676.617272][T10067] kernfs runtime_active_time: removing [ 676.623438][ T1108] rxe0: qp#16 rxe_receiver: state = CHK_RESOURCE [ 676.628990][T10067] kernfs autosuspend_delay_ms: removing [ 676.629043][T10067] kernfs power: removing [ 676.629088][T10067] kernfs device: removing [ 676.629173][T10067] kernfs subsystem: removing [ 676.655492][T10067] kernfs hci3:201: removing [ 676.660180][T10067] kernfs uevent: removing [ 676.664571][T10067] PM: Removing info for No Bus:hci3:201 [ 676.670288][T10067] kobject: 'hci3:201' (ffff888054cee5f0): kobject_uevent_env [ 676.677812][T10067] kobject: 'hci3:201' (ffff888054cee5f0): fill_kobj_path: path = '/devices/virtual/bluetooth/hci3/hci3:201' [ 676.691760][T10067] kernfs hci3:201: removing [ 676.696356][T10067] kobject: 'hci3:201' (ffff888054cee5f0): kobject_cleanup, parent 0000000000000000 [ 676.705786][T10067] kobject: 'hci3:201' (ffff888054cee5f0): calling ktype release [ 676.713584][T10067] kobject: 'hci3:201': free name [ 676.719008][T10067] hci3 orig refcnt 7 [ 676.722956][T10067] hdev hci3 event 4 [ 676.726897][T10067] hdev 0000000000000000 len 8 [ 676.731720][T10067] hci3: Cleanup of MSFT extension [ 676.737087][T10067] hdev hci3 event 8 [ 676.740063][ T1108] rxe0: qp#16 rxe_receiver: state = CHK_LENGTH [ 676.740970][T10067] hci3 orig refcnt 6 [ 676.751198][T10067] channel 3 len 6 [ 676.755896][T10067] channel 3 len 8 [ 676.759752][T10067] hdev hci3 event 2 [ 676.763637][T10067] hdev 0000000000000000 len 8 [ 676.768488][T10067] kernfs runtime_status: removing [ 676.769223][ T1108] rxe0: qp#16 rxe_receiver: state = EXECUTE [ 676.773685][T10067] kernfs control: removing [ 676.784034][T10067] kernfs runtime_suspended_time: removing [ 676.789885][T10067] kernfs runtime_active_time: removing [ 676.795477][T10067] kernfs autosuspend_delay_ms: removing [ 676.801144][T10067] kernfs power: removing [ 676.805467][T10067] kernfs device: removing [ 676.809937][T10067] kernfs subsystem: removing [ 676.814590][T10067] kernfs rfkill17: removing [ 676.819226][T10067] kernfs uevent: removing [ 676.823611][T10067] kernfs name: removing [ 676.827899][T10067] kernfs type: removing [ 676.832123][T10067] kernfs index: removing [ 676.836427][T10067] kernfs persistent: removing [ 676.841240][T10067] kernfs state: removing [ 676.845621][T10067] kernfs soft: removing [ 676.852886][T10067] kernfs hard: removing [ 676.858161][T10067] kernfs hard_block_reasons: removing [ 676.863616][T10067] PM: Removing info for No Bus:rfkill17 [ 676.869339][T10067] kobject: 'rfkill17' (ffff888146269110): kobject_uevent_env [ 676.876850][T10067] kobject: 'rfkill17' (ffff888146269110): fill_kobj_path: path = '/devices/virtual/bluetooth/hci3/rfkill17' [ 676.880329][ T1108] rxe0: qp#16 rxe_receiver: state = COMPLETE [ 676.888815][T10067] kernfs rfkill17: removing [ 676.899116][T10067] kobject: 'rfkill17' (ffff888146269110): kobject_cleanup, parent 0000000000000000 [ 676.908521][T10067] kobject: 'rfkill17' (ffff888146269110): calling ktype release [ 676.916249][T10067] kobject: 'rfkill17': free name [ 676.921312][T10067] kernfs runtime_status: removing [ 676.926418][T10067] kernfs control: removing [ 676.929169][ T5777] RDS/IB: Passive conn connected <::ffff:172.20.20.170,::ffff:172.20.20.170,0> version 3.1 [ 676.931115][T10067] kernfs runtime_suspended_time: removing [ 676.942649][ T1108] rxe0: qp#16 rxe_receiver: state = CLEANUP [ 676.946716][T10067] kernfs runtime_active_time: removing [ 676.959227][T10067] kernfs autosuspend_delay_ms: removing [ 676.964871][T10067] kernfs power: removing [ 676.969381][T10067] kernfs subsystem: removing [ 676.974054][T10067] kernfs hci3: removing [ 676.978415][T10067] kernfs uevent: removing [ 676.982797][T10067] PM: Removing info for No Bus:hci3 [ 676.988474][T10067] kobject: 'hci3' (ffff8880605c9520): kobject_uevent_env [ 676.995622][T10067] kobject: 'hci3' (ffff8880605c9520): fill_kobj_path: path = '/devices/virtual/bluetooth/hci3' [ 677.006271][T10067] kernfs hci3: removing [ 677.010532][T10067] hci3 orig refcnt 2 [ 677.014485][T10067] kobject: 'hci3' (ffff8880605c9520): kobject_cleanup, parent 0000000000000000 [ 677.023517][T10067] kobject: 'hci3' (ffff8880605c9520): calling ktype release [ 677.031059][T10067] All LE connection parameters were removed [ 677.031263][ T1108] rxe0: qp#16 rxe_receiver: state = DONE [ 677.037015][T10067] hci3: Unregister MSFT extension [ 677.037186][T10067] kobject: 'hci3': free name [ 677.097614][ T1108] rxe0: qp#16 rxe_receiver: state = GET_REQ [ 677.103595][ T1108] rxe0: qp#16 rxe_receiver: state = EXIT [ 677.107453][ C0] virtqueue callback for ffff888146e52400 (ffffffff849b2ec0) [ 677.116714][ C0] virtqueue interrupt with no work for ffff888146e52200 [ 677.123699][ C0] virtqueue interrupt with no work for ffff888146e52000 [ 677.156865][T10067] syz_tun: bond_netdev_event received NETDEV_GOING_DOWN [ 677.164708][T10067] net syz_tun: siw: event 10 [ 677.169409][ T1108] rxe0: qp#16 rxe_completer: state = GET ACK [ 677.169431][ T1108] rxe0: qp#16 rxe_completer: state = GET WQE [ 677.169451][ T1108] rxe0: qp#16 rxe_completer: state = COMP WQE [ 677.169499][ T1108] rxe0: qp#16 rxe_completer: state = GET WQE [ 677.169514][ T1108] rxe0: qp#16 rxe_completer: state = EXIT [ 677.169557][ T1108] rxe0: qp#16 rxe_completer: state = GET ACK [ 677.169583][ T1108] rxe0: qp#16 rxe_completer: state = GET WQE [ 677.169598][ T1108] rxe0: qp#16 rxe_completer: state = EXIT [ 677.169614][ T1108] rxe0: qp#16 rxe_completer: state = GET ACK [ 677.169629][ T1108] rxe0: qp#16 rxe_completer: state = GET WQE [ 677.169644][ T1108] rxe0: qp#16 rxe_completer: state = EXIT [ 677.211796][ C0] wireguard: wg1: Handshake for peer 21 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 10) [ 677.211932][ C0] wireguard: wg1: Handshake for peer 22 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 14) [ 677.211996][ C0] wireguard: wg2: Handshake for peer 23 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 15) [ 677.216703][ C1] wireguard: wg0: Handshake for peer 19 ([::1]:20002/0%0) did not complete after 5 seconds, retrying (try 2) [ 677.219629][ T9133] Added buffer head 0 to ffff888146e52400 [ 677.294162][T10067] In tnode_resize ffff88805f63be20 inflate_threshold=50 threshold=25 [ 677.302431][T10067] In tnode_resize ffff88805cbb9420 inflate_threshold=50 threshold=25 [ 677.310770][T10067] In tnode_resize ffff88805cb82820 inflate_threshold=50 threshold=25 [ 677.318967][T10067] In tnode_resize ffff88801eb7a020 inflate_threshold=50 threshold=25 [ 677.327128][T10067] In tnode_resize ffff8880303c66a0 inflate_threshold=50 threshold=25 [ 677.335254][T10067] In tnode_resize ffff88807a7972a0 inflate_threshold=50 threshold=25 [ 677.343440][T10067] In tnode_resize ffff88807a797620 inflate_threshold=50 threshold=25 [ 677.351582][T10038] kobject: 'gid_attrs' (ffff8880654c0008): kobject_add_internal: parent: '1', set: '' [ 677.351603][T10067] trie_flush found=1 [ 677.351858][T10067] In tnode_resize ffff88805f63be20 inflate_threshold=50 threshold=25 [ 677.374903][T10067] In tnode_resize ffff88805cbb9420 inflate_threshold=50 threshold=25 [ 677.383083][T10067] In tnode_resize ffff88805cb82820 inflate_threshold=50 threshold=25 [ 677.391960][T10067] In tnode_resize ffff88801eb7a020 inflate_threshold=50 threshold=25 [ 677.400262][T10067] In tnode_resize ffff8880303c66a0 inflate_threshold=50 threshold=25 [ 677.408844][T10067] In tnode_resize ffff88807a7972a0 inflate_threshold=50 threshold=25 [ 677.416991][T10067] In tnode_resize ffff88807a797620 inflate_threshold=50 threshold=25 [ 677.425102][T10067] trie_flush found=1 [ 677.429143][T10067] syz_tun: bond_netdev_event received NETDEV_DOWN [ 677.435618][T10067] net syz_tun: siw: event 2 [ 677.441907][T10067] sctp: sctp_addr_wq_mgmt: add new entry for cmd:2, addr:fe80::a8aa:aaff:feaa:aaaa in wq:ffff88806b88add8 [ 677.453833][T10067] sctp: sctp_addr_wq_mgmt: add new entry for cmd:2, addr:fe80::aa in wq:ffff88806b88add8 [ 677.488675][T10067] Deleting ac141400/24 dsfield=0x00 t=ffff888028c3d430 [ 677.495647][T10067] Deleting ac1414ff/32 dsfield=0x00 t=ffff888028c3d430 [ 677.502793][T10067] Deleting ac1414aa/32 dsfield=0x00 t=ffff888028c3d430 [ 677.509964][T10067] In tnode_resize ffff88801eb7a020 inflate_threshold=50 threshold=25 [ 677.518168][T10067] In tnode_resize ffff88807a797620 inflate_threshold=50 threshold=25 [ 677.526391][T10067] sctp: sctp_addr_wq_mgmt: add new entry for cmd:2, addr:172.20.20.170 in wq:ffff88806b88add8 [ 677.537155][T10067] syz_tun (unregistering): bond_netdev_event received NETDEV_UNREGISTER [ 677.545551][T10067] net syz_tun: siw: event 6 [ 677.551801][T10067] syz_tun (unregistering): bond_netdev_event received NETDEV_PRE_UNINIT [ 677.560420][T10067] net syz_tun: siw: event 18 [ 677.584894][T10067] kobject: 'rx-0' (ffff88801de57050): kobject_cleanup, parent ffff88802fee5850 [ 677.594091][T10067] kobject: 'rx-0' (ffff88801de57050): auto cleanup kobject_del [ 677.601751][T10067] kernfs rps_cpus: removing [ 677.606332][T10067] kernfs rps_flow_cnt: removing [ 677.611318][T10067] kobject: 'rx-0' (ffff88801de57050): auto cleanup 'remove' event [ 677.619243][T10067] kobject: 'rx-0' (ffff88801de57050): kobject_uevent_env [ 677.626363][T10067] kobject: 'rx-0' (ffff88801de57050): fill_kobj_path: path = '/devices/virtual/net/syz_tun/queues/rx-0' [ 677.637771][T10067] kernfs rx-0: removing [ 677.641996][T10067] kobject: 'rx-0' (ffff88801de57050): calling ktype release [ 677.649395][T10067] kobject: 'rx-0': free name [ 677.654056][T10067] kernfs limit: removing [ 677.658440][T10067] kernfs limit_max: removing [ 677.663177][T10067] kernfs limit_min: removing [ 677.667884][T10067] kernfs hold_time: removing [ 677.672547][T10067] kernfs inflight: removing [ 677.678148][T10067] kernfs byte_queue_limits: removing [ 677.683512][T10067] kobject: 'tx-0' (ffff888079c6b820): kobject_cleanup, parent ffff88802fee5850 [ 677.692704][T10067] kobject: 'tx-0' (ffff888079c6b820): auto cleanup kobject_del [ 677.700358][T10067] kernfs tx_timeout: removing [ 677.705125][T10067] kernfs traffic_class: removing [ 677.710208][T10067] kernfs xps_cpus: removing [ 677.714839][T10067] kernfs xps_rxqs: removing [ 677.719520][T10067] kernfs tx_maxrate: removing [ 677.724266][T10067] kobject: 'tx-0' (ffff888079c6b820): auto cleanup 'remove' event [ 677.732751][T10067] kobject: 'tx-0' (ffff888079c6b820): kobject_uevent_env [ 677.739918][T10067] kobject: 'tx-0' (ffff888079c6b820): fill_kobj_path: path = '/devices/virtual/net/syz_tun/queues/tx-0' [ 677.751305][T10067] kernfs tx-0: removing [ 677.755539][T10067] kobject: 'tx-0' (ffff888079c6b820): calling ktype release [ 677.762973][T10067] kobject: 'tx-0': free name [ 677.767702][T10067] kernfs queues: removing [ 677.772189][T10067] kobject: 'queues' (ffff88802fee5850): kobject_cleanup, parent 0000000000000000 [ 677.782375][T10067] kobject: 'queues' (ffff88802fee5850): calling ktype release [ 677.789925][T10067] kobject: 'queues' (ffff88802fee5850): kset_release [ 677.796716][T10067] kobject: 'queues': free name [ 677.801559][T10067] kernfs runtime_status: removing [ 677.806725][T10067] kernfs control: removing [ 677.811227][T10067] kernfs runtime_suspended_time: removing [ 677.817079][T10067] kernfs runtime_active_time: removing [ 677.822615][T10067] kernfs autosuspend_delay_ms: removing [ 677.828394][T10067] kernfs power: removing [ 677.832721][T10067] kernfs subsystem: removing [ 677.837458][T10067] kernfs syz_tun: removing [ 677.841955][T10067] kernfs uevent: removing [ 677.846370][T10067] kernfs tun_flags: removing [ 677.851391][T10067] kernfs owner: removing [ 677.853788][ T5117] sd 0:0:1:0: cmd ffff888025d1c410 CDB: 0x2a [ 677.855773][T10067] kernfs group: removing [ 677.866223][T10067] kernfs rx_packets: removing [ 677.871818][T10067] kernfs tx_packets: removing [ 677.876566][T10067] kernfs rx_bytes: removing [ 677.882059][T10067] kernfs tx_bytes: removing [ 677.886668][T10067] kernfs rx_errors: removing [ 677.891349][T10067] kernfs tx_errors: removing [ 677.896036][T10067] kernfs rx_dropped: removing [ 677.900869][T10067] kernfs tx_dropped: removing [ 677.905622][T10067] kernfs multicast: removing [ 677.906797][ T5117] Added buffer head 32 to ffff888022c7e000 [ 677.910464][T10067] kernfs collisions: removing [ 677.920869][T10067] kernfs rx_length_errors: removing [ 677.926152][T10067] kernfs rx_over_errors: removing [ 677.931318][T10067] kernfs rx_crc_errors: removing [ 677.936347][T10067] kernfs rx_frame_errors: removing [ 677.942180][T10067] kernfs rx_fifo_errors: removing [ 677.947044][ C1] virtqueue callback for ffff888022c7e000 (ffffffff857a8e40) [ 677.954669][ C1] sd 0:0:1:0: cmd ffff888025d1c410 response 0 status 0x0 sense_len 0 [ 677.956740][ C0] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff88806b88add8 is addr:fe80::a8aa:aaff:feaa:aaaa for cmd:2 at entry:ffff88802fb15e80 [ 677.962770][ C1] No more buffers in queue [ 677.977675][ C0] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff88806b88add8 is addr:fe80::aa for cmd:2 at entry:ffff88802fb15f00 [ 677.983997][ T24] sd 0:0:1:0: cmd ffff8880239c7910 CDB: 0x35 [ 677.995198][ C0] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff88806b88add8 is addr:172.20.20.170 for cmd:2 at entry:ffff88802fb15f80 [ 678.001505][ T24] Added buffer head 32 to ffff888022c7e000 [ 678.021711][ C1] virtqueue callback for ffff888022c7e000 (ffffffff857a8e40) [ 678.029203][ C1] sd 0:0:1:0: cmd ffff8880239c7910 response 0 status 0x0 sense_len 0 [ 678.037327][ C1] No more buffers in queue [ 678.046702][ T24] sd 0:0:1:0: cmd ffff888025d1c7d0 CDB: 0x2a [ 678.052780][ T24] Added buffer head 32 to ffff888022c7e000 [ 678.060059][ C1] virtqueue callback for ffff888022c7e000 (ffffffff857a8e40) [ 678.067105][T10067] kernfs rx_missed_errors: removing [ 678.067481][ C1] sd 0:0:1:0: cmd ffff888025d1c7d0 response 0 status 0x0 sense_len 0 [ 678.072813][T10067] kernfs tx_aborted_errors: removing [ 678.080780][ C1] No more buffers in queue [ 678.091443][T10067] kernfs tx_carrier_errors: removing [ 678.096999][T10067] kernfs tx_fifo_errors: removing [ 678.102150][T10067] kernfs tx_heartbeat_errors: removing [ 678.107685][ C0] virtqueue callback for ffff888146e52400 (ffffffff849b2ec0) [ 678.107761][ C0] virtqueue interrupt with no work for ffff888146e52200 [ 678.107777][ C0] virtqueue interrupt with no work for ffff888146e52000 [ 678.129844][T10067] kernfs tx_window_errors: removing [ 678.135118][T10067] kernfs rx_compressed: removing [ 678.140175][T10067] kernfs tx_compressed: removing [ 678.145178][T10067] kernfs rx_nohandler: removing [ 678.150154][T10067] kernfs statistics: removing [ 678.154967][T10067] kernfs netdev_group: removing [ 678.159952][T10067] kernfs type: removing [ 678.164176][T10067] kernfs dev_id: removing [ 678.168711][T10067] kernfs dev_port: removing [ 678.173287][T10067] kernfs iflink: removing [ 678.177725][T10067] kernfs ifindex: removing [ 678.182230][T10067] kernfs name_assign_type: removing [ 678.188522][T10067] kernfs addr_assign_type: removing [ 678.193803][T10067] kernfs addr_len: removing [ 678.198426][T10067] kernfs link_mode: removing [ 678.203088][T10067] kernfs address: removing [ 678.207601][T10067] kernfs broadcast: removing [ 678.212259][T10067] kernfs speed: removing [ 678.216562][T10067] kernfs duplex: removing [ 678.221003][T10067] kernfs dormant: removing [ 678.225474][T10067] kernfs testing: removing [ 678.230034][T10067] kernfs operstate: removing [ 678.234727][T10067] kernfs carrier_changes: removing [ 678.239957][T10067] kernfs ifalias: removing [ 678.244461][T10067] kernfs carrier: removing [ 678.249015][T10067] kernfs mtu: removing [ 678.253158][T10067] kernfs flags: removing [ 678.257512][T10067] kernfs tx_queue_len: removing [ 678.262440][T10067] kernfs gro_flush_timeout: removing [ 678.267831][T10067] kernfs napi_defer_hard_irqs: removing [ 678.273450][T10067] kernfs phys_port_id: removing [ 678.279078][T10067] kernfs phys_port_name: removing [ 678.284189][T10067] kernfs phys_switch_id: removing [ 678.290346][T10067] kernfs proto_down: removing [ 678.295104][T10067] kernfs carrier_up_count: removing [ 678.300440][T10067] kernfs carrier_down_count: removing [ 678.305883][T10067] kernfs threaded: removing [ 678.310555][T10067] PM: Removing info for No Bus:syz_tun [ 678.316071][T10067] kobject: 'syz_tun' (ffff888022e206f0): kobject_uevent_env [ 678.323505][T10067] kobject: 'syz_tun' (ffff888022e206f0): fill_kobj_path: path = '/devices/virtual/net/syz_tun' [ 678.334115][T10067] kernfs syz_tun: removing [ 678.338878][ T56] Added buffer head 0 to ffff888146e52400 [ 678.348276][ T5449] lapb14: bond_netdev_event received NETDEV_PRE_UP [ 678.354874][ T5449] net lapb14: siw: event 14 [ 678.377777][T10067] kobject: 'syz_tun' (ffff888022e206f0): kobject_cleanup, parent 0000000000000000 [ 678.387119][T10067] kobject: 'syz_tun' (ffff888022e206f0): calling ktype release [ 678.387365][ T5449] lapb14: bond_netdev_event received NETDEV_UP [ 678.396571][T10067] kobject: 'syz_tun': free name [ 678.406446][T10067] MPTCP: msk=ffff88805b0cb100 state=7 [ 678.412185][T10067] MPTCP: msk=ffff88805b0cb100 [ 678.417098][T10067] MPTCP: msk=ffff88805b0cb100 [ 678.446724][ T5449] net lapb14: siw: event 1 [ 678.566819][ C0] percpu_ref_switch_to_atomic_rcu: global 9223372036854775801 percpu 8 [ 678.578209][ T5449] netdevsim netdevsim1 eth7: bond_netdev_event received NETDEV_CHANGE [ 678.603471][T10038] device: 'syz1': device_add [ 678.608272][T10038] kobject: 'syz1' (ffff888053e4f000): kobject_add_internal: parent: 'infiniband', set: 'devices' [ 678.618957][T10038] infiniband syz1: No ACPI support [ 678.624561][T10038] PM: Adding info for No Bus:syz1 [ 678.633120][ T5449] net eth7: siw: event 4 [ 678.639068][T10038] kobject: 'syz1' (ffff888053e4f000): kobject_uevent_env [ 678.646229][T10038] kobject: 'syz1' (ffff888053e4f000): fill_kobj_path: path = '/devices/virtual/infiniband/syz1' [ 678.646952][ T1108] wireguard: wg2: Creating namespace exiting [ 678.664394][T10038] kobject: 'ports' (ffff88802cfaf880): kobject_add_internal: parent: 'syz1', set: '' [ 678.692213][ T1108] wireguard: wg1: Creating namespace exiting [ 678.719330][ T1108] wireguard: wg0: Creating namespace exiting [ 678.743457][T10038] kobject: '1' (ffff8880628a0000): kobject_add_internal: parent: 'ports', set: '' [ 678.743965][ T1108] netdevsim netdevsim4 netdevsim3: bond_netdev_event received NETDEV_GOING_DOWN [ 678.800063][ T1108] net netdevsim3: siw: event 10 [ 678.817153][ T1108] netdevsim netdevsim4 netdevsim3: bond_netdev_event received NETDEV_DOWN [ 678.825789][ T1108] net netdevsim3: siw: event 2 [ 678.838161][ T1108] sctp: sctp_addr_wq_mgmt: add new entry for cmd:2, addr:fe80::bced:6cff:fef2:2ccd in wq:ffff88806b88add8 [ 678.867958][ T1108] netdevsim netdevsim4 netdevsim3 (unregistering): bond_netdev_event received NETDEV_UNREGISTER [ 678.886699][ T1108] net netdevsim3: siw: event 6 [ 678.894658][ T1108] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.912448][T10038] kobject: 'gid_attrs' (ffff888065fc0008): kobject_add_internal: parent: '1', set: '' [ 678.924440][ T1108] netdevsim netdevsim4 netdevsim3 (unregistering): bond_netdev_event received NETDEV_PRE_UNINIT [ 678.946681][ T1108] net netdevsim3: siw: event 18 [ 678.951733][ T1108] kobject: 'rx-0' (ffff88801de57550): kobject_cleanup, parent ffff88814d434a50 [ 678.978219][ T1108] kobject: 'rx-0' (ffff88801de57550): auto cleanup kobject_del [ 678.985856][ T1108] kernfs rps_cpus: removing [ 679.020539][ T1108] kernfs rps_flow_cnt: removing [ 679.025575][ T1108] kobject: 'rx-0' (ffff88801de57550): auto cleanup 'remove' event [ 679.061925][ T1108] kobject: 'rx-0' (ffff88801de57550): kobject_uevent_env [ 679.076765][ T1108] kobject: 'rx-0' (ffff88801de57550): kobject_uevent_env: uevent_suppress caused the event to drop! [ 679.096689][ T1108] kernfs rx-0: removing [ 679.100953][ T1108] kobject: 'rx-0' (ffff88801de57550): calling ktype release [ 679.107368][ C0] virtqueue callback for ffff888146e52400 (ffffffff849b2ec0) [ 679.115742][ C0] virtqueue interrupt with no work for ffff888146e52200 [ 679.116351][ T5793] ffff888025f30000 name hci2 bus 0 [ 679.122711][ C0] virtqueue interrupt with no work for ffff888146e52000 [ 679.124330][ T56] Added buffer head 0 to ffff888146e52400 [ 679.127963][ C1] wireguard: wg0: Handshake for peer 20 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2) [ 679.131558][ T1108] kobject: 'rx-0': free name [ 679.144438][ T11] net_ratelimit: 41 callbacks suppressed [ 679.144490][ T11] wireguard: wg0: Sending handshake initiation to peer 20 ([::1]:20003/0%0) [ 679.153661][ T1108] kernfs limit: removing [ 679.179311][ T5793] hci2: err 0x13 [ 679.182935][ T5793] hci2 ffff888025f30000 [ 679.187297][ T1108] kernfs limit_max: removing [ 679.192011][ T1108] kernfs limit_min: removing [ 679.198186][ T5793] hci2: [ 679.201231][ T1108] kernfs hold_time: removing [ 679.201256][ T5793] hci2: err 0x13 [ 679.205962][ T1108] kernfs inflight: removing [ 679.209734][ C1] wireguard: wg0: Sending keepalive packet to peer 7 ([::1]:20002/0%0) [ 679.209824][ C1] wireguard: wg0: Sending keepalive packet to peer 25 ([::1]:20002/0%0) [ 679.226950][ T5793] hci2: cancelling interleave scan [ 679.239296][ C1] wireguard: wg1: Receiving keepalive packet from peer 9 ([::1]:20001/0%0) [ 679.256709][ T1108] kernfs byte_queue_limits: removing [ 679.262108][ T1108] kobject: 'tx-0' (ffff88805b664420): kobject_cleanup, parent ffff88814d434a50 [ 679.266885][ T5793] hci2 state 0 -> 0 [ 679.275163][ T5793] All LE pending actions cleared [ 679.285427][ T9547] ffff88806bb50000 name hci4 bus 0 [ 679.292448][ T1108] kobject: 'tx-0' (ffff88805b664420): auto cleanup kobject_del [ 679.298446][ T5793] hdev hci2 [ 679.303219][ T5793] hcon ffff88807875a000 reason 22 [ 679.307102][ T1108] kernfs tx_timeout: removing [ 679.313455][ T5793] hcon ffff88807875a000 conn ffff88802b75b000, err 103 [ 679.313492][ T5793] hci2 hcon ffff88807875a000 chan ffff888029b17e00 [ 679.327860][ T1108] kernfs traffic_class: removing [ 679.327883][ T9547] hci4: err 0x13 [ 679.332914][ T1108] kernfs xps_cpus: removing [ 679.336394][ T9547] hci4 ffff88806bb50000 [ 679.345394][ T5793] hci2 hcon ffff88807875a000 handle 201 [ 679.346748][ T1108] kernfs xps_rxqs: removing [ 679.355565][ T1108] kernfs tx_maxrate: removing [ 679.356016][ T5793] hci2: hcon ffff88807875a000 [ 679.360389][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff88806b88add8 is addr:fe80::bced:6cff:fef2:2ccd for cmd:2 at entry:ffff88801b754580 [ 679.380052][ C1] wireguard: wg0: Sending keepalive packet to peer 31 ([::1]:20002/0%0) [ 679.383131][ T1108] kobject: 'tx-0' (ffff88805b664420): auto cleanup 'remove' event [ 679.389715][ C1] wireguard: wg1: Receiving keepalive packet from peer 33 ([::1]:20001/0%0) [ 679.405459][ T9547] hci4: [ 679.410883][ T9547] hci4: err 0x13 [ 679.415220][ T9547] hci4: cancelling interleave scan [ 679.417306][ T1108] kobject: 'tx-0' (ffff88805b664420): kobject_uevent_env [ 679.420624][ T9547] hci4 state 0 -> 0 [ 679.431341][ T9547] All LE pending actions cleared [ 679.436312][ T9547] hdev hci4 [ 679.436877][ T1108] kobject: 'tx-0' (ffff88805b664420): kobject_uevent_env: uevent_suppress caused the event to drop! [ 679.443340][ T9547] hcon ffff888030a94000 reason 22 [ 679.455414][ T5793] hcon ffff88807875a000 [ 679.461430][ T5793] hci2: conn ffff88807875a000 [ 679.466175][ T5793] device: 'hci2:201': device_unregister [ 679.466834][ T1108] kernfs tx-0: removing [ 679.471934][ T9547] hcon ffff888030a94000 conn ffff888053f49000, err 103 [ 679.483113][ T5793] kernfs runtime_status: removing [ 679.488765][ T1108] kobject: 'tx-0' (ffff88805b664420): calling ktype release [ 679.489747][ T5793] kernfs control: removing [ 679.496133][ T1108] kobject: 'tx-0': free name [ 679.504147][ T9547] hci4 hcon ffff888030a94000 chan ffff88805f63b100 [ 679.512155][ T1108] kernfs queues: removing [ 679.512296][ T9547] hci4 hcon ffff888030a94000 handle 200 [ 679.519559][ T5793] kernfs runtime_suspended_time: removing [ 679.528661][ T1108] kobject: 'queues' (ffff88814d434a50): kobject_cleanup, parent 0000000000000000 [ 679.537964][ T5793] kernfs runtime_active_time: removing [ 679.543542][ T5793] kernfs autosuspend_delay_ms: removing [ 679.545392][ T9547] hci4: hcon ffff888030a94000 [ 679.549207][ T1108] kobject: 'queues' (ffff88814d434a50): calling ktype release [ 679.549227][ T1108] kobject: 'queues' (ffff88814d434a50): kset_release [ 679.549292][ T1108] kobject: 'queues': free name [ 679.556457][ T9547] hcon ffff888030a94000 [ 679.562060][ T5793] kernfs power: removing [ 679.581797][ T9547] hci4: conn ffff888030a94000 [ 679.582049][ T1108] kernfs runtime_status: removing [ 679.586511][ T9547] device: 'hci4:200': device_unregister [ 679.594450][T10038] device: 'syz1': device_add [ 679.602314][T10038] kobject: 'syz1' (ffff888053fa7000): kobject_add_internal: parent: 'infiniband', set: 'devices' [ 679.609841][ T9547] kernfs runtime_status: removing [ 679.618600][ T5793] kernfs device: removing [ 679.623949][ T5793] kernfs subsystem: removing [ 679.628799][ T5793] kernfs hci2:201: removing [ 679.633402][ T5793] kernfs uevent: removing [ 679.638045][ T5793] PM: Removing info for No Bus:hci2:201 [ 679.638720][T10038] infiniband syz1: No ACPI support [ 679.643643][ T5793] kobject: 'hci2:201' (ffff88807875a5f0): kobject_uevent_env [ 679.649119][ T1108] kernfs control: removing [ 679.656920][ T5793] kobject: 'hci2:201' (ffff88807875a5f0): fill_kobj_path: path = '/devices/virtual/bluetooth/hci2/hci2:201' [ 679.675428][ T1108] kernfs runtime_suspended_time: removing [ 679.681977][ T9547] kernfs control: removing [ 679.686528][ T1108] kernfs runtime_active_time: removing [ 679.693324][ T1108] kernfs autosuspend_delay_ms: removing [ 679.699191][ T5793] kernfs hci2:201: removing [ 679.703791][ T5793] kobject: 'hci2:201' (ffff88807875a5f0): kobject_cleanup, parent 0000000000000000 [ 679.703817][ T9547] kernfs runtime_suspended_time: removing [ 679.719665][ T9547] kernfs runtime_active_time: removing [ 679.720606][ T5793] kobject: 'hci2:201' (ffff88807875a5f0): calling ktype release [ 679.725771][ T9547] kernfs autosuspend_delay_ms: removing [ 679.725838][ T9547] kernfs power: removing [ 679.725884][ T9547] kernfs device: removing [ 679.725920][ T9547] kernfs subsystem: removing [ 679.725956][ T9547] kernfs hci4:200: removing [ 679.725994][ T9547] kernfs uevent: removing [ 679.726015][ T9547] PM: Removing info for No Bus:hci4:200 [ 679.726037][ T9547] kobject: 'hci4:200' (ffff888030a945f0): kobject_uevent_env [ 679.726145][ T9547] kobject: 'hci4:200' (ffff888030a945f0): fill_kobj_path: path = '/devices/virtual/bluetooth/hci4/hci4:200' [ 679.745123][ T5793] kobject: 'hci2:201': free name [ 679.749319][ T1108] kernfs power: removing [ 679.758192][ T5793] hci2 orig refcnt 7 [ 679.776750][ C1] wireguard: wg2: Handshake for peer 24 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 20) [ 679.801065][T10038] PM: Adding info for No Bus:syz1 [ 679.814657][ T1108] kernfs device: removing [ 679.820150][ T770] wireguard: wg2: Sending handshake initiation to peer 24 (127.0.0.1:20002) [ 679.825378][ T1108] kernfs subsystem: removing [ 679.835022][ T9547] kernfs hci4:200: removing [ 679.835424][T10038] kobject: 'syz1' (ffff888053fa7000): kobject_uevent_env [ 679.841462][ T1108] kernfs netdevsim3: removing [ 679.851660][ T9547] kobject: 'hci4:200' (ffff888030a945f0): kobject_cleanup, parent 0000000000000000 [ 679.857770][ T5793] hdev hci2 event 4 [ 679.861738][ T1108] kernfs uevent: removing [ 679.864921][ T5793] hdev 0000000000000000 len 8 [ 679.870255][ T1108] kernfs rx_packets: removing [ 679.874346][T10038] kobject: 'syz1' (ffff888053fa7000): fill_kobj_path: path = '/devices/virtual/infiniband/syz1' [ 679.879099][ T9547] kobject: 'hci4:200' (ffff888030a945f0): calling ktype release [ 679.895562][ T5793] hci2: Cleanup of MSFT extension [ 679.901150][ T1108] kernfs tx_packets: removing [ 679.903468][ T5793] hdev hci2 event 8 [ 679.908202][ T1108] kernfs rx_bytes: removing [ 679.914850][ T5793] hci2 orig refcnt 6 [ 679.915884][ T1108] kernfs tx_bytes: removing [ 679.920320][T10038] kobject: 'ports' (ffff8880207be100): kobject_add_internal: parent: 'syz1', set: '' [ 679.924703][ T9547] kobject: 'hci4:200': free name [ 679.937627][ T5793] channel 3 len 6 [ 679.941861][ T1108] kernfs rx_errors: removing [ 679.943770][ T5793] channel 3 len 8 [ 679.949319][ T1108] kernfs tx_errors: removing [ 679.956805][ T9547] hci4 orig refcnt 11 [ 679.960848][ T9547] hcon ffff888031568000 reason 22 [ 679.965932][ T9547] hcon ffff888031568000 conn ffff88801cf13000, err 103 [ 679.972980][ T5793] hdev hci2 event 2 [ 679.973053][ T5793] hdev 0000000000000000 len 8 [ 679.979713][ T1108] kernfs rx_dropped: removing [ 679.982032][ T9547] hci4 hcon ffff888031568000 chan ffff88802f3a7800 [ 679.986445][ T1108] kernfs tx_dropped: removing [ 679.997839][ T9547] hci4 hcon ffff888031568000 handle 201 [ 680.003442][ T9547] hci4: hcon ffff888031568000 [ 680.008552][ T5793] kernfs runtime_status: removing [ 680.012047][ T9547] hcon ffff888031568000 [ 680.013788][ T5793] kernfs control: removing [ 680.022419][ T9547] hci4: conn ffff888031568000 [ 680.022450][ T1108] kernfs multicast: removing [ 680.029586][ T9547] device: 'hci4:201': device_unregister [ 680.034577][ T5793] kernfs runtime_suspended_time: removing [ 680.043431][ T5793] kernfs runtime_active_time: removing [ 680.049115][ T9547] kernfs runtime_status: removing [ 680.054251][ T9547] kernfs control: removing [ 680.059751][ T9547] kernfs runtime_suspended_time: removing [ 680.065610][ T1108] kernfs collisions: removing [ 680.070754][ T1108] kernfs rx_length_errors: removing [ 680.076042][ T5793] kernfs autosuspend_delay_ms: removing [ 680.083459][ T9547] kernfs runtime_active_time: removing [ 680.089051][ C0] wireguard: wg0: Sending keepalive packet to peer 26 ([::1]:20003/0%0) [ 680.089147][ C0] wireguard: wg0: Sending keepalive packet to peer 8 ([::1]:20003/0%0) [ 680.106109][ C0] wireguard: wg2: Receiving keepalive packet from peer 11 ([::1]:20001/0%0) [ 680.111013][ T9547] kernfs autosuspend_delay_ms: removing [ 680.114940][ C0] virtqueue callback for ffff888146e52400 (ffffffff849b2ec0) [ 680.121351][ T9547] kernfs power: removing [ 680.127809][ C0] virtqueue interrupt with no work for ffff888146e52200 [ 680.135587][ T9547] kernfs device: removing [ 680.138986][ C0] virtqueue interrupt with no work for ffff888146e52000 [ 680.141161][ T5889] Added buffer head 0 to ffff888146e52400 [ 680.146092][ T9547] kernfs subsystem: removing [ 680.161187][ T1108] kernfs rx_over_errors: removing [ 680.165442][ C1] virtqueue callback for ffff888022e48600 (ffffffff85c2c4f0) [ 680.173691][ C1] No more buffers in queue [ 680.178187][ C1] Receiving skb proto 0x0806 len 28 type 1 [ 680.183286][ T1108] kernfs rx_crc_errors: removing [ 680.184024][ C1] No more buffers in queue [ 680.193733][ C1] No more buffers in queue [ 680.198218][ C1] eth0: xmit ffff88805fb7b140 42:01:0a:80:00:01 [ 680.201910][ T1108] kernfs rx_frame_errors: removing [ 680.204500][ C1] Added buffer head 11 to ffff888022e48800 [ 680.209676][ C1] virtqueue callback for ffff888022e48800 (ffffffff85c2c5e0) [ 680.220828][ T1108] kernfs rx_fifo_errors: removing [ 680.224257][ C1] Sent skb ffff88805fb7b140 [ 680.232620][ C1] No more buffers in queue [ 680.238054][ T1108] kernfs rx_missed_errors: removing [ 680.243583][ T1108] kernfs tx_aborted_errors: removing [ 680.249727][ T9547] kernfs hci4:201: removing [ 680.254343][ T1108] kernfs tx_carrier_errors: removing [ 680.260181][ T1108] kernfs tx_fifo_errors: removing [ 680.265870][ T1108] kernfs tx_heartbeat_errors: removing [ 680.271664][ T1108] kernfs tx_window_errors: removing [ 680.277067][ T9547] kernfs uevent: removing [ 680.281438][ T1108] kernfs rx_compressed: removing [ 680.286481][ T5793] kernfs power: removing [ 680.291180][ T5793] kernfs device: removing [ 680.295637][ T5793] kernfs subsystem: removing [ 680.300384][ T5793] kernfs rfkill7: removing [ 680.305003][ T5793] kernfs uevent: removing [ 680.309562][ T1108] kernfs tx_compressed: removing [ 680.314638][ T1108] kernfs rx_nohandler: removing [ 680.319693][ T9547] PM: Removing info for No Bus:hci4:201 [ 680.321003][ T5793] kernfs name: removing [ 680.325286][ T9547] kobject: 'hci4:201' (ffff8880315685f0): kobject_uevent_env [ 680.339543][ T9547] kobject: 'hci4:201' (ffff8880315685f0): fill_kobj_path: path = '/devices/virtual/bluetooth/hci4/hci4:201' [ 680.342389][ T5793] kernfs type: removing [ 680.356261][ T1108] kernfs statistics: removing [ 680.361337][ T1108] kernfs netdev_group: removing [ 680.366283][ T1108] kernfs type: removing [ 680.370606][ T9547] kernfs hci4:201: removing [ 680.375164][ T1108] kernfs dev_id: removing [ 680.375184][ T9547] kobject: 'hci4:201' (ffff8880315685f0): kobject_cleanup, parent 0000000000000000 [ 680.379850][ T1108] kernfs dev_port: removing [ 680.393770][ T9547] kobject: 'hci4:201' (ffff8880315685f0): calling ktype release [ 680.401648][ T9547] kobject: 'hci4:201': free name [ 680.403772][ T5793] kernfs index: removing [ 680.411293][ T9547] hci4 orig refcnt 7 [ 680.415240][ T9547] hdev hci4 event 4 [ 680.420067][ T5793] kernfs persistent: removing [ 680.420806][ T9547] hdev 0000000000000000 len 8 [ 680.425209][ T5793] kernfs state: removing [ 680.434123][ T1108] kernfs iflink: removing [ 680.437467][ T9547] hci4: Cleanup of MSFT extension [ 680.442967][ T1108] kernfs ifindex: removing [ 680.448821][ T9547] hdev hci4 event 8 [ 680.452803][ T9547] hci4 orig refcnt 6 [ 680.454484][ T1108] kernfs name_assign_type: removing [ 680.462343][ T9547] channel 3 len 6 [ 680.466091][ T9547] channel 3 len 8 [ 680.469908][ T9547] hdev hci4 event 2 [ 680.473777][ T9547] hdev 0000000000000000 len 8 [ 680.478639][ T5793] kernfs soft: removing [ 680.482888][ T5793] kernfs hard: removing [ 680.487199][ T5793] kernfs hard_block_reasons: removing [ 680.492636][ T1108] kernfs addr_assign_type: removing [ 680.492637][ T5793] PM: Removing info for No Bus:rfkill7 [ 680.492662][ T5793] kobject: 'rfkill7' (ffff88807646b110): kobject_uevent_env [ 680.501455][ T9547] kernfs runtime_status: removing [ 680.503834][ T5793] kobject: 'rfkill7' (ffff88807646b110): fill_kobj_path: path = '/devices/virtual/bluetooth/hci2/rfkill7' [ 680.511377][ T1108] kernfs addr_len: removing [ 680.532137][ T1108] kernfs link_mode: removing [ 680.537074][ T1108] kernfs address: removing [ 680.542546][ T1108] kernfs broadcast: removing [ 680.547284][ T1108] kernfs speed: removing [ 680.551589][ T5793] kernfs rfkill7: removing [ 680.556043][ T1108] kernfs duplex: removing [ 680.558054][ T5793] kobject: 'rfkill7' (ffff88807646b110): kobject_cleanup, parent 0000000000000000 [ 680.560984][ T1108] kernfs dormant: removing [ 680.574167][ T9547] kernfs control: removing [ 680.579089][ T5793] kobject: 'rfkill7' (ffff88807646b110): calling ktype release [ 680.582557][ T9547] kernfs runtime_suspended_time: removing [ 680.587744][ T5793] kobject: 'rfkill7': free name [ 680.597504][ T9547] kernfs runtime_active_time: removing [ 680.603030][ T1108] kernfs testing: removing [ 680.608073][ T5793] kernfs runtime_status: removing [ 680.613605][ T5793] kernfs control: removing [ 680.618762][ T5793] kernfs runtime_suspended_time: removing [ 680.624567][ T9547] kernfs autosuspend_delay_ms: removing [ 680.631321][ T1108] kernfs operstate: removing [ 680.636041][ T1108] kernfs carrier_changes: removing [ 680.641404][ T5793] kernfs runtime_active_time: removing [ 680.647951][ T9547] kernfs power: removing [ 680.652361][ T1108] kernfs ifalias: removing [ 680.657124][ T9547] kernfs device: removing [ 680.661589][ T5793] kernfs autosuspend_delay_ms: removing [ 680.669949][ T9547] kernfs subsystem: removing [ 680.674661][ T9547] kernfs rfkill20: removing [ 680.679741][ T9547] kernfs uevent: removing [ 680.684144][ T1108] kernfs carrier: removing [ 680.689305][ T5793] kernfs power: removing [ 680.693708][ T5793] kernfs subsystem: removing [ 680.699081][ T5793] kernfs hci2: removing [ 680.703375][ T5793] kernfs uevent: removing [ 680.707970][ T1108] kernfs mtu: removing [ 680.712170][ T1108] kernfs flags: removing [ 680.716477][ T1108] kernfs tx_queue_len: removing [ 680.721755][ T1108] kernfs gro_flush_timeout: removing [ 680.728453][ T1108] kernfs napi_defer_hard_irqs: removing [ 680.734131][ T1108] kernfs phys_port_id: removing [ 680.739343][ T1108] kernfs phys_port_name: removing [ 680.744457][ T1108] kernfs phys_switch_id: removing [ 680.744471][ T5793] PM: Removing info for No Bus:hci2 [ 680.751767][ T9547] kernfs name: removing [ 680.759654][ T1108] kernfs proto_down: removing [ 680.762710][ T5793] kobject: 'hci2' (ffff888025f31520): kobject_uevent_env [ 680.764472][ T1108] kernfs carrier_up_count: removing [ 680.773951][ T5793] kobject: 'hci2' (ffff888025f31520): fill_kobj_path: path = '/devices/virtual/bluetooth/hci2' [ 680.776948][ T9547] kernfs type: removing [ 680.791928][ T1108] kernfs carrier_down_count: removing [ 680.797516][ T1108] kernfs threaded: removing [ 680.802126][ T1108] PM: Removing info for No Bus:netdevsim3 [ 680.802149][ T5793] kernfs hci2: removing [ 680.808016][ T1108] kobject: 'netdevsim3' (ffff88803158c6f0): kobject_uevent_env [ 680.808037][ T1108] kobject: 'netdevsim3' (ffff88803158c6f0): kobject_uevent_env: uevent_suppress caused the event to drop! [ 680.831516][ T5793] hci2 orig refcnt 2 [ 680.831530][ T9547] kernfs index: removing [ 680.835431][ T5793] kobject: 'hci2' (ffff888025f31520): kobject_cleanup, parent 0000000000000000 [ 680.849410][ T9547] kernfs persistent: removing [ 680.854171][ T9547] kernfs state: removing [ 680.858541][ T9547] kernfs soft: removing [ 680.862779][ T9547] kernfs hard: removing [ 680.867381][ T5793] kobject: 'hci2' (ffff888025f31520): calling ktype release [ 680.874793][ T1108] kernfs netdevsim3: removing [ 680.880595][ T9547] kernfs hard_block_reasons: removing [ 680.886070][ T9547] PM: Removing info for No Bus:rfkill20 [ 680.892848][ T9547] kobject: 'rfkill20' (ffff88801eb0e110): kobject_uevent_env [ 680.901414][ T9547] kobject: 'rfkill20' (ffff88801eb0e110): fill_kobj_path: path = '/devices/virtual/bluetooth/hci4/rfkill20' [ 680.903142][ T5793] All LE connection parameters were removed [ 680.919314][ T5793] hci2: Unregister MSFT extension [ 680.922500][ T5449] sctp: sctp_addr_wq_mgmt: add new entry for cmd:0, addr:fe80::5f91:9141:d25a:874e in wq:ffffffff986f33d8 [ 680.924684][ T5793] kobject: 'hci2': free name [ 680.943117][ T5449] IPv6: now = 4295005173, schedule = 4295017200, rounded schedule = 4295017300 => 4295017200 [ 680.961708][ T9547] kernfs rfkill20: removing [ 680.961721][ T1086] wg2: bond_netdev_event received NETDEV_CHANGE [ 680.966540][ T9547] kobject: 'rfkill20' (ffff88801eb0e110): kobject_cleanup, parent 0000000000000000 [ 680.974571][ T1108] kobject: 'netdevsim3' (ffff88803158c6f0): kobject_cleanup, parent 0000000000000000 [ 680.982804][ T9547] kobject: 'rfkill20' (ffff88801eb0e110): calling ktype release [ 680.999867][ T9547] kobject: 'rfkill20': free name [ 681.004918][ T9547] kernfs runtime_status: removing [ 681.008148][ T1086] net wg2: siw: event 4 [ 681.015193][ T1086] wg1: bond_netdev_event received NETDEV_CHANGE [ 681.021775][ T9547] kernfs control: removing [ 681.021813][ T9547] kernfs runtime_suspended_time: removing [ 681.021846][ T9547] kernfs runtime_active_time: removing [ 681.021891][ T9547] kernfs autosuspend_delay_ms: removing [ 681.030252][ T1108] kobject: 'netdevsim3' (ffff88803158c6f0): calling ktype release [ 681.037172][ T9547] kernfs power: removing [ 681.037927][ T1086] net wg1: siw: event 4 [ 681.044818][ T9547] kernfs subsystem: removing [ 681.066602][ T1108] kobject: 'netdevsim3': free name [ 681.073951][ T1086] wg0: bond_netdev_event received NETDEV_CHANGE [ 681.081132][ T9547] kernfs hci4: removing [ 681.084286][ T1086] net wg0: siw: event 4 [ 681.085442][ T9547] kernfs uevent: removing [ 681.094115][T10038] kobject: '1' (ffff888060ac0000): kobject_add_internal: parent: 'ports', set: '' [ 681.095625][ T9547] PM: Removing info for No Bus:hci4 [ 681.107192][ C0] virtqueue callback for ffff888146e52400 (ffffffff849b2ec0) [ 681.110916][ T5793] syz_tun: bond_netdev_event received NETDEV_GOING_DOWN [ 681.117063][ C0] virtqueue interrupt with no work for ffff888146e52200 [ 681.124290][ T9547] kobject: 'hci4' (ffff88806bb51520): kobject_uevent_env [ 681.130969][ C0] virtqueue interrupt with no work for ffff888146e52000 [ 681.131495][ T5889] Added buffer head 0 to ffff888146e52400 [ 681.140785][ T5793] net syz_tun: siw: event 10 [ 681.157416][ T9547] kobject: 'hci4' (ffff88806bb51520): fill_kobj_path: path = '/devices/virtual/bluetooth/hci4' [ 681.169270][ T5793] In tnode_resize ffff88807d1e8520 inflate_threshold=50 threshold=25 [ 681.179053][ T9547] kernfs hci4: removing [ 681.183297][ T9547] hci4 orig refcnt 2 [ 681.187364][ T9547] kobject: 'hci4' (ffff88806bb51520): kobject_cleanup, parent 0000000000000000 [ 681.196356][ T9547] kobject: 'hci4' (ffff88806bb51520): calling ktype release [ 681.198235][ T5793] In tnode_resize ffff88805caa2c20 inflate_threshold=50 threshold=25 [ 681.212296][ T9547] All LE connection parameters were removed [ 681.218420][ T9547] hci4: Unregister MSFT extension [ 681.223720][ T9547] kobject: 'hci4': free name [ 681.236085][ T5793] In tnode_resize ffff88805d13fc20 inflate_threshold=50 threshold=25 [ 681.244623][ T5793] In tnode_resize ffff88802e9c9a20 inflate_threshold=50 threshold=25 [ 681.266516][ T5793] In tnode_resize ffff88803051fb20 inflate_threshold=50 threshold=25 [ 681.275111][ T5793] In tnode_resize ffff88802e00aea0 inflate_threshold=50 threshold=25 [ 681.283849][ T5793] In tnode_resize ffff88802e00a420 inflate_threshold=50 threshold=25 [ 681.293060][ T5793] trie_flush found=1 [ 681.297698][ T5793] In tnode_resize ffff88807d1e8520 inflate_threshold=50 threshold=25 [ 681.305837][ T5793] In tnode_resize ffff88805caa2c20 inflate_threshold=50 threshold=25 [ 681.314358][ T5793] In tnode_resize ffff88805d13fc20 inflate_threshold=50 threshold=25 [ 681.323030][ T5793] In tnode_resize ffff88802e9c9a20 inflate_threshold=50 threshold=25 [ 681.331526][ T5793] In tnode_resize ffff88803051fb20 inflate_threshold=50 threshold=25 [ 681.340221][ T5793] In tnode_resize ffff88802e00aea0 inflate_threshold=50 threshold=25 [ 681.348613][ T5793] In tnode_resize ffff88802e00a420 inflate_threshold=50 threshold=25 [ 681.349739][T10038] kobject: 'gid_attrs' (ffff88806ca80008): kobject_add_internal: parent: '1', set: '' [ 681.357954][ T5793] trie_flush found=1 [ 681.371892][ T5793] syz_tun: bond_netdev_event received NETDEV_DOWN [ 681.378637][ T5793] net syz_tun: siw: event 2 [ 681.400392][ T5793] sctp: sctp_addr_wq_mgmt: add new entry for cmd:2, addr:fe80::a8aa:aaff:feaa:aaaa in wq:ffff8880791d8fd8 [ 681.417735][ T5793] sctp: sctp_addr_wq_mgmt: add new entry for cmd:2, addr:fe80::aa in wq:ffff8880791d8fd8 [ 681.431804][ T5793] Deleting ac141400/24 dsfield=0x00 t=ffff888030eadd30 [ 681.436757][ C0] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffffffff986f33d8 is addr:fe80::5f91:9141:d25a:874e for cmd:0 at entry:ffff88803363db00 [ 681.440206][ T5793] Deleting ac1414ff/32 dsfield=0x00 t=ffff888030eadd30 [ 681.461257][ T5793] Deleting ac1414aa/32 dsfield=0x00 t=ffff888030eadd30 [ 681.469351][ T5793] In tnode_resize ffff88802e9c9a20 inflate_threshold=50 threshold=25 [ 681.477804][ T5793] In tnode_resize ffff88802e00a420 inflate_threshold=50 threshold=25 [ 681.486037][ T5793] sctp: sctp_addr_wq_mgmt: add new entry for cmd:2, addr:172.20.20.170 in wq:ffff8880791d8fd8 [ 681.497314][ T5793] syz_tun (unregistering): bond_netdev_event received NETDEV_UNREGISTER [ 681.505715][ T5793] net syz_tun: siw: event 6 [ 681.512539][ T5793] syz_tun (unregistering): bond_netdev_event received NETDEV_PRE_UNINIT [ 681.521262][ T5793] net syz_tun: siw: event 18 [ 681.526098][ T5793] kobject: 'rx-0' (ffff88805f40d450): kobject_cleanup, parent ffff888022d90750 [ 681.535656][ T5793] kobject: 'rx-0' (ffff88805f40d450): auto cleanup kobject_del [ 681.543561][ T5793] kernfs rps_cpus: removing [ 681.548856][ T5793] kernfs rps_flow_cnt: removing [ 681.553810][ T5793] kobject: 'rx-0' (ffff88805f40d450): auto cleanup 'remove' event [ 681.563402][ T5793] kobject: 'rx-0' (ffff88805f40d450): kobject_uevent_env [ 681.572236][ T5793] kobject: 'rx-0' (ffff88805f40d450): fill_kobj_path: path = '/devices/virtual/net/syz_tun/queues/rx-0' [ 681.585712][ T5793] kernfs rx-0: removing [ 681.590075][ T5793] kobject: 'rx-0' (ffff88805f40d450): calling ktype release [ 681.599151][ T5793] kobject: 'rx-0': free name [ 681.603838][ T5793] kernfs limit: removing [ 681.608564][ T5793] kernfs limit_max: removing [ 681.613248][ T5793] kernfs limit_min: removing [ 681.617978][ T5793] kernfs hold_time: removing [ 681.622750][ T5793] kernfs inflight: removing [ 681.627445][ T5793] kernfs byte_queue_limits: removing [ 681.632817][ T5793] kobject: 'tx-0' (ffff888027bd0420): kobject_cleanup, parent ffff888022d90750 [ 681.641862][ T5793] kobject: 'tx-0' (ffff888027bd0420): auto cleanup kobject_del [ 681.649592][ T5793] kernfs tx_timeout: removing [ 681.654356][ T5793] kernfs traffic_class: removing [ 681.659526][ T5793] kernfs xps_cpus: removing [ 681.664122][ T5793] kernfs xps_rxqs: removing [ 681.669984][ T5793] kernfs tx_maxrate: removing [ 681.674807][ T5793] kobject: 'tx-0' (ffff888027bd0420): auto cleanup 'remove' event [ 681.683797][ T5793] kobject: 'tx-0' (ffff888027bd0420): kobject_uevent_env [ 681.692342][ T5793] kobject: 'tx-0' (ffff888027bd0420): fill_kobj_path: path = '/devices/virtual/net/syz_tun/queues/tx-0' [ 681.704024][ T5793] kernfs tx-0: removing [ 681.708538][ T5793] kobject: 'tx-0' (ffff888027bd0420): calling ktype release [ 681.716453][ T5793] kobject: 'tx-0': free name [ 681.723548][ T5793] kernfs queues: removing [ 681.728218][ T5793] kobject: 'queues' (ffff888022d90750): kobject_cleanup, parent 0000000000000000 [ 681.735824][T10038] kobject: 'syz1' (ffff8880527b8718): kobject_uevent_env [ 681.737427][ T5793] kobject: 'queues' (ffff888022d90750): calling ktype release [ 681.745367][T10038] kobject: 'syz1' (ffff8880527b8718): fill_kobj_path: path = '/devices/virtual/infiniband/syz1' [ 681.752025][ T5793] kobject: 'queues' (ffff888022d90750): kset_release [ 681.772327][ T5793] kobject: 'queues': free name [ 681.775816][T10038] kcov: kcov_task_exit: t = ffff88807bacda00, kcov->t = ffff88807bacda00 [ 681.777416][ T5793] kernfs runtime_status: removing [ 681.792435][ T5793] kernfs control: removing [ 681.797022][ T5793] kernfs runtime_suspended_time: removing [ 681.802825][ T5793] kernfs runtime_active_time: removing [ 681.809988][ T5793] kernfs autosuspend_delay_ms: removing [ 681.815640][ T5793] kernfs power: removing [ 681.820368][ T5793] kernfs subsystem: removing [ 681.825046][ T5793] kernfs syz_tun: removing [ 681.832436][ T5793] kernfs uevent: removing [ 681.837232][ T5793] kernfs tun_flags: removing [ 681.841900][ T5793] kernfs owner: removing [ 681.846255][ T5793] kernfs group: removing [ 681.852641][ T5793] kernfs rx_packets: removing [ 681.857775][ T5793] kernfs tx_packets: removing [ 681.862531][ T5793] kernfs rx_bytes: removing [ 681.869171][ T5793] kernfs tx_bytes: removing [ 681.874751][ T5793] kernfs rx_errors: removing [ 681.881640][ T5793] kernfs tx_errors: removing [ 681.886317][ T5793] kernfs rx_dropped: removing [ 681.891777][ T5793] kernfs tx_dropped: removing [ 681.896529][ T5793] kernfs multicast: removing [ 681.901656][ T5793] kernfs collisions: removing [ 681.906415][ T5793] kernfs rx_length_errors: removing [ 681.912234][ T5793] kernfs rx_over_errors: removing [ 681.917586][ T5793] kernfs rx_crc_errors: removing [ 681.922660][ T5793] kernfs rx_frame_errors: removing [ 681.926838][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff8880791d8fd8 is addr:fe80::a8aa:aaff:feaa:aaaa for cmd:2 at entry:ffff88802f9e7c00 [ 681.929793][ T5793] kernfs rx_fifo_errors: removing [ 681.942556][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff8880791d8fd8 is addr:fe80::aa for cmd:2 at entry:ffff88802f9e7d80 [ 681.948613][ T5793] kernfs rx_missed_errors: removing [ 681.960938][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff8880791d8fd8 is addr:172.20.20.170 for cmd:2 at entry:ffff88802f9e7680 [ 681.967047][ T5793] kernfs tx_aborted_errors: removing [ 681.986474][ T5793] kernfs tx_carrier_errors: removing [ 681.991808][ T24] sd 0:0:1:0: cmd ffff888025d1cb90 CDB: 0x2a [ 681.991838][ T24] Added buffer head 32 to ffff888022c7e000 [ 681.991865][ T24] sd 0:0:1:0: cmd ffff888025d1cf50 CDB: 0x2a [ 681.991884][ T24] Added buffer head 31 to ffff888022c7e000 [ 681.991908][ T24] sd 0:0:1:0: cmd ffff888025d0e210 CDB: 0x2a [ 681.991927][ T24] Added buffer head 82 to ffff888022c7e000 [ 681.991950][ T24] sd 0:0:1:0: cmd ffff888025d0e5d0 CDB: 0x2a [ 681.991970][ T24] Added buffer head 117 to ffff888022c7e000 [ 681.991993][ T24] sd 0:0:1:0: cmd ffff888025d0e990 CDB: 0x2a [ 682.042493][ T5793] kernfs tx_fifo_errors: removing [ 682.045939][ T24] Added buffer head 194 to ffff888022c7e000 [ 682.056862][ T24] sd 0:0:1:0: cmd ffff888025d0ed50 CDB: 0x2a [ 682.062898][ T24] Added buffer head 187 to ffff888022c7e000 [ 682.068899][ T24] sd 0:0:1:0: cmd ffff888025d0f110 CDB: 0x2a [ 682.070724][ T5793] kernfs tx_heartbeat_errors: removing [ 682.074916][ T24] Added buffer head 77 to ffff888022c7e000 [ 682.086731][ T24] sd 0:0:1:0: cmd ffff888025d0f4d0 CDB: 0x2a [ 682.092784][ T24] Added buffer head 202 to ffff888022c7e000 [ 682.099543][ T57] sd 0:0:1:0: cmd ffff888025cfda90 CDB: 0x2a [ 682.100361][ C1] virtqueue callback for ffff888022c7e000 (ffffffff857a8e40) [ 682.105577][ T57] Added buffer head 78 to ffff888022c7e000 [ 682.118847][ C1] sd 0:0:1:0: cmd ffff888025d1cb90 response 0 status 0x0 sense_len 0 [ 682.118916][ C0] virtqueue callback for ffff888146e52400 (ffffffff849b2ec0) [ 682.126959][ C1] sd 0:0:1:0: cmd ffff888025d0f110 response 0 status 0x0 sense_len 0 [ 682.134504][ C0] virtqueue interrupt with no work for ffff888146e52200 [ 682.142403][ C1] sd 0:0:1:0: cmd ffff888025d0e5d0 response 0 status 0x0 sense_len 0 [ 682.149344][ C0] virtqueue interrupt with no work for ffff888146e52000 [ 682.157418][ C1] sd 0:0:1:0: cmd ffff888025d1cf50 response 0 status 0x0 sense_len 0 [ 682.165486][ T56] Added buffer head 0 to ffff888146e52400 [ 682.172468][ C1] sd 0:0:1:0: cmd ffff888025d0e210 response 0 status 0x0 sense_len 0 [ 682.172494][ C1] sd 0:0:1:0: cmd ffff888025d0f4d0 response 0 status 0x0 sense_len 0 [ 682.172517][ C1] sd 0:0:1:0: cmd ffff888025d0e990 response 0 status 0x0 sense_len 0 [ 682.184727][ T57] sd 0:0:1:0: cmd ffff888025cfde50 CDB: 0x2a [ 682.186328][ C1] sd 0:0:1:0: cmd ffff888025d0ed50 response 0 status 0x0 sense_len 0 [ 682.216595][ C1] sd 0:0:1:0: cmd ffff888025cfda90 response 0 status 0x0 sense_len 0 [ 682.224966][ C1] No more buffers in queue [ 682.229476][ T57] Added buffer head 78 to ffff888022c7e000 [ 682.235335][ T5793] kernfs tx_window_errors: removing [ 682.235719][ T57] sd 0:0:1:0: cmd ffff888025cfe210 CDB: 0x2a [ 682.240891][ T5793] kernfs rx_compressed: removing [ 682.250980][ T57] Added buffer head 187 to ffff888022c7e000 [ 682.252648][ T5793] kernfs tx_compressed: removing [ 682.262553][ T5793] kernfs rx_nohandler: removing [ 682.267350][ T57] sd 0:0:1:0: cmd ffff888025cfe5d0 CDB: 0x2a [ 682.267427][ T57] Added buffer head 194 to ffff888022c7e000 [ 682.267454][ T57] sd 0:0:1:0: cmd ffff888025cfe990 CDB: 0x2a [ 682.267473][ T57] Added buffer head 202 to ffff888022c7e000 [ 682.273592][ T5793] kernfs statistics: removing [ 682.279747][ T57] sd 0:0:1:0: cmd ffff888025cfed50 CDB: 0x2a [ 682.285923][ T5793] kernfs netdev_group: removing [ 682.285963][ T5793] kernfs type: removing [ 682.285997][ T5793] kernfs dev_id: removing [ 682.286029][ T5793] kernfs dev_port: removing [ 682.286063][ T5793] kernfs iflink: removing [ 682.286096][ T5793] kernfs ifindex: removing [ 682.286130][ T5793] kernfs name_assign_type: removing [ 682.286163][ T5793] kernfs addr_assign_type: removing [ 682.286196][ T5793] kernfs addr_len: removing [ 682.286229][ T5793] kernfs link_mode: removing [ 682.286307][ T5793] kernfs address: removing [ 682.292598][ T57] Added buffer head 82 to ffff888022c7e000 [ 682.297031][ T5793] kernfs broadcast: removing [ 682.303044][ T57] sd 0:0:1:0: cmd ffff888025cf0110 CDB: 0x2a [ 682.328667][ T5793] kernfs speed: removing [ 682.330748][ T57] Added buffer head 31 to ffff888022c7e000 [ 682.335049][ T5793] kernfs duplex: removing [ 682.340304][ T57] sd 0:0:1:0: cmd ffff888025cf04d0 CDB: 0x2a [ 682.340336][ T57] Added buffer head 117 to ffff888022c7e000 [ 682.340440][ T57] sd 0:0:1:0: cmd ffff888025cf0890 CDB: 0x2a [ 682.340460][ T57] Added buffer head 77 to ffff888022c7e000 [ 682.340481][ T57] sd 0:0:1:0: cmd ffff888025cf0c50 CDB: 0x2a [ 682.340499][ T57] Added buffer head 32 to ffff888022c7e000 [ 682.340524][ T57] sd 0:0:1:0: cmd ffff888025cf1010 CDB: 0x2a [ 682.340541][ T57] Added buffer head 97 to ffff888022c7e000 [ 682.340563][ T57] sd 0:0:1:0: cmd ffff888025cf13d0 CDB: 0x2a [ 682.340580][ T57] Added buffer head 52 to ffff888022c7e000 [ 682.340602][ T57] sd 0:0:1:0: cmd ffff888025cf1790 CDB: 0x2a [ 682.340620][ T57] Added buffer head 90 to ffff888022c7e000 [ 682.340644][ T57] sd 0:0:1:0: cmd ffff888025cf1b50 CDB: 0x2a [ 682.340662][ T57] Added buffer head 133 to ffff888022c7e000 [ 682.340684][ T57] sd 0:0:1:0: cmd ffff888025cf1f10 CDB: 0x2a [ 682.340703][ T57] Added buffer head 2 to ffff888022c7e000 [ 682.340727][ T57] sd 0:0:1:0: cmd ffff888025cf22d0 CDB: 0x2a [ 682.340744][ T57] Added buffer head 199 to ffff888022c7e000 [ 682.340823][ C1] wireguard: wg2: Handshake for peer 23 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 16) [ 682.340869][ T57] sd 0:0:1:0: cmd ffff888025cf2690 CDB: 0x2a [ 682.340889][ T57] Added buffer head 60 to ffff888022c7e000 [ 682.340913][ T57] sd 0:0:1:0: cmd ffff888025cf2a50 CDB: 0x2a [ 682.340932][ T57] Added buffer head 119 to ffff888022c7e000 [ 682.340954][ T57] sd 0:0:1:0: cmd ffff888025cf2e10 CDB: 0x2a [ 682.340973][ T57] Added buffer head 95 to ffff888022c7e000 [ 682.340997][ T57] sd 0:0:1:0: cmd ffff888025cf31d0 CDB: 0x2a [ 682.341016][ T57] Added buffer head 184 to ffff888022c7e000 [ 682.341039][ T57] sd 0:0:1:0: cmd ffff888025cf3590 CDB: 0x2a [ 682.341057][ T57] Added buffer head 105 to ffff888022c7e000 [ 682.341079][ T57] sd 0:0:1:0: cmd ffff888025cf3950 CDB: 0x2a [ 682.345611][ C1] virtqueue callback for ffff888022c7e000 (ffffffff857a8e40) [ 682.350528][ T57] Added buffer head 79 to ffff888022c7e000 [ 682.581883][ C1] sd 0:0:1:0: cmd ffff888025cfe5d0 response 0 status 0x0 sense_len 0 [ 682.590046][ C1] sd 0:0:1:0: cmd ffff888025cfde50 response 0 status 0x0 sense_len 0 [ 682.593767][ T57] sd 0:0:1:0: cmd ffff888025cf3d10 CDB: 0x2a [ 682.598151][ C1] sd 0:0:1:0: cmd ffff888025cf04d0 response 0 status 0x0 sense_len 0 [ 682.598177][ C1] sd 0:0:1:0: cmd ffff888025cfe210 response 0 status 0x0 sense_len 0 [ 682.598198][ C1] sd 0:0:1:0: cmd ffff888025cfe990 response 0 status 0x0 sense_len 0 [ 682.598222][ C1] sd 0:0:1:0: cmd ffff888025cfed50 response 0 status 0x0 sense_len 0 [ 682.636467][ C1] sd 0:0:1:0: cmd ffff888025cf22d0 response 0 status 0x0 sense_len 0 [ 682.644565][ C1] sd 0:0:1:0: cmd ffff888025cf0c50 response 0 status 0x0 sense_len 0 [ 682.652758][ C1] sd 0:0:1:0: cmd ffff888025cf0890 response 0 status 0x0 sense_len 0 [ 682.660835][ C1] sd 0:0:1:0: cmd ffff888025cf31d0 response 0 status 0x0 sense_len 0 [ 682.668912][ C1] sd 0:0:1:0: cmd ffff888025cf1010 response 0 status 0x0 sense_len 0 [ 682.677004][ C1] sd 0:0:1:0: cmd ffff888025cf3590 response 0 status 0x0 sense_len 0 [ 682.685082][ C1] sd 0:0:1:0: cmd ffff888025cf2690 response 0 status 0x0 sense_len 0 [ 682.693179][ C1] sd 0:0:1:0: cmd ffff888025cf0110 response 0 status 0x0 sense_len 0 [ 682.701259][ C1] sd 0:0:1:0: cmd ffff888025cf3950 response 0 status 0x0 sense_len 0 [ 682.709328][ C1] sd 0:0:1:0: cmd ffff888025cf2e10 response 0 status 0x0 sense_len 0 [ 682.717406][ C1] sd 0:0:1:0: cmd ffff888025cf13d0 response 0 status 0x0 sense_len 0 [ 682.725479][ C1] sd 0:0:1:0: cmd ffff888025cf1f10 response 0 status 0x0 sense_len 0 [ 682.733572][ C1] sd 0:0:1:0: cmd ffff888025cf1b50 response 0 status 0x0 sense_len 0 [ 682.741651][ C1] sd 0:0:1:0: cmd ffff888025cf1790 response 0 status 0x0 sense_len 0 [ 682.749728][ C1] sd 0:0:1:0: cmd ffff888025cf2a50 response 0 status 0x0 sense_len 0 [ 682.757829][ C1] No more buffers in queue [ 682.762348][ T57] Added buffer head 119 to ffff888022c7e000 [ 682.769148][ T31] sd 0:0:1:0: cmd ffff888025d0f890 CDB: 0x2a [ 682.775214][ T31] Added buffer head 90 to ffff888022c7e000 [ 682.781339][ T31] sd 0:0:1:0: cmd ffff888025d0fc50 CDB: 0x2a [ 682.787148][ T57] sd 0:0:1:0: cmd ffff888025cf40d0 CDB: 0x2a [ 682.787578][ T31] Added buffer head 133 to ffff888022c7e000 [ 682.799278][ T57] Added buffer head 2 to ffff888022c7e000 [ 682.800427][ T31] sd 0:0:1:0: cmd ffff888025d10110 CDB: 0x2a [ 682.805251][ T57] sd 0:0:1:0: cmd ffff888025cf4490 CDB: 0x2a [ 682.811161][ T31] Added buffer head 52 to ffff888022c7e000 [ 682.822912][ T57] Added buffer head 95 to ffff888022c7e000 [ 682.823024][ T31] sd 0:0:1:0: cmd ffff888025d104d0 CDB: 0x2a [ 682.828899][ T57] sd 0:0:1:0: cmd ffff888025cf4850 CDB: 0x2a [ 682.834764][ T31] Added buffer head 79 to ffff888022c7e000 [ 682.846624][ T57] Added buffer head 31 to ffff888022c7e000 [ 682.852555][ T57] sd 0:0:1:0: cmd ffff888025cf4c10 CDB: 0x2a [ 682.858682][ T57] Added buffer head 60 to ffff888022c7e000 [ 682.864565][ T57] sd 0:0:1:0: cmd ffff888025cf4fd0 CDB: 0x2a [ 682.868137][ T31] sd 0:0:1:0: cmd ffff888025d10890 CDB: 0x2a [ 682.870736][ T57] Added buffer head 105 to ffff888022c7e000 [ 682.882515][ T31] Added buffer head 97 to ffff888022c7e000 [ 682.882990][ T57] sd 0:0:1:0: cmd ffff888025cf5390 CDB: 0x2a [ 682.894463][ T57] Added buffer head 184 to ffff888022c7e000 [ 682.901405][ T57] sd 0:0:1:0: cmd ffff888025cf5750 CDB: 0x2a [ 682.907510][ T57] Added buffer head 77 to ffff888022c7e000 [ 682.913392][ T57] sd 0:0:1:0: cmd ffff888025cf5b10 CDB: 0x2a [ 682.919511][ T57] Added buffer head 32 to ffff888022c7e000 [ 682.925382][ T57] sd 0:0:1:0: cmd ffff888025cf5ed0 CDB: 0x2a [ 682.931468][ T57] Added buffer head 199 to ffff888022c7e000 [ 682.937470][ T5793] kernfs dormant: removing [ 682.937552][ T31] sd 0:0:1:0: cmd ffff888025d10c50 CDB: 0x2a [ 682.941952][ C1] virtqueue callback for ffff888022c7e000 (ffffffff857a8e40) [ 682.948257][ T31] Added buffer head 82 to ffff888022c7e000 [ 682.961300][ C1] sd 0:0:1:0: cmd ffff888025cf4fd0 response 0 status 0x0 sense_len 0 [ 682.961549][ T31] sd 0:0:1:0: cmd ffff888025d11010 CDB: 0x2a [ 682.969404][ C1] sd 0:0:1:0: cmd ffff888025cf3d10 response 0 status 0x0 sense_len 0 [ 682.969429][ C1] sd 0:0:1:0: cmd ffff888025cf4c10 response 0 status 0x0 sense_len 0 [ 682.969450][ C1] sd 0:0:1:0: cmd ffff888025cf40d0 response 0 status 0x0 sense_len 0 [ 682.969471][ C1] sd 0:0:1:0: cmd ffff888025cf4490 response 0 status 0x0 sense_len 0 [ 682.969494][ C1] sd 0:0:1:0: cmd ffff888025cf5ed0 response 0 status 0x0 sense_len 0 [ 682.969515][ C1] sd 0:0:1:0: cmd ffff888025cf5b10 response 0 status 0x0 sense_len 0 [ 682.969537][ C1] sd 0:0:1:0: cmd ffff888025d10110 response 0 status 0x0 sense_len 0 [ 683.031994][ C1] sd 0:0:1:0: cmd ffff888025cf5390 response 0 status 0x0 sense_len 0 [ 683.040076][ C1] sd 0:0:1:0: cmd ffff888025d0f890 response 0 status 0x0 sense_len 0 [ 683.048148][ C1] sd 0:0:1:0: cmd ffff888025d0fc50 response 0 status 0x0 sense_len 0 [ 683.056221][ C1] sd 0:0:1:0: cmd ffff888025d104d0 response 0 status 0x0 sense_len 0 [ 683.064347][ C1] sd 0:0:1:0: cmd ffff888025d10890 response 0 status 0x0 sense_len 0 [ 683.072458][ C1] sd 0:0:1:0: cmd ffff888025cf4850 response 0 status 0x0 sense_len 0 [ 683.080541][ C1] sd 0:0:1:0: cmd ffff888025cf5750 response 0 status 0x0 sense_len 0 [ 683.088622][ C1] No more buffers in queue [ 683.093193][ T31] Added buffer head 77 to ffff888022c7e000 [ 683.095515][ C1] wireguard: wg0: Handshake for peer 19 ([::1]:20002/0%0) did not complete after 5 seconds, retrying (try 2) [ 683.107039][ C0] virtqueue callback for ffff888146e52400 (ffffffff849b2ec0) [ 683.110821][ C1] wireguard: wg1: Handshake for peer 22 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 15) [ 683.118050][ C0] virtqueue interrupt with no work for ffff888146e52200 [ 683.129754][ C1] wireguard: wg1: Handshake for peer 21 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 11) [ 683.136568][ C0] virtqueue interrupt with no work for ffff888146e52000 [ 683.160814][ T9133] Added buffer head 0 to ffff888146e52400 [ 683.166945][ T31] sd 0:0:1:0: cmd ffff888025d11790 CDB: 0x2a [ 683.170287][ T5793] kernfs testing: removing [ 683.172969][ T31] Added buffer head 31 to ffff888022c7e000 [ 683.183459][ T31] sd 0:0:1:0: cmd ffff888025d11b50 CDB: 0x2a [ 683.189539][ T31] Added buffer head 97 to ffff888022c7e000 [ 683.195408][ T31] sd 0:0:1:0: cmd ffff888025d113d0 CDB: 0x2a [ 683.196907][ T5793] kernfs operstate: removing [ 683.201655][ T31] Added buffer head 79 to ffff888022c7e000 [ 683.213374][ T5793] kernfs carrier_changes: removing [ 683.222942][ T5793] kernfs ifalias: removing [ 683.227697][ T5793] kernfs carrier: removing [ 683.232152][ C1] virtqueue callback for ffff888022c7e000 (ffffffff857a8e40) [ 683.232181][ C1] sd 0:0:1:0: cmd ffff888025d11790 response 0 status 0x0 sense_len 0 [ 683.232214][ C1] sd 0:0:1:0: cmd ffff888025d113d0 response 0 status 0x0 sense_len 0 [ 683.232239][ C1] sd 0:0:1:0: cmd ffff888025d10c50 response 0 status 0x0 sense_len 0 [ 683.232263][ C1] sd 0:0:1:0: cmd ffff888025d11010 response 0 status 0x0 sense_len 0 [ 683.232288][ C1] sd 0:0:1:0: cmd ffff888025d11b50 response 0 status 0x0 sense_len 0 [ 683.232309][ C1] No more buffers in queue [ 683.287128][ T5793] kernfs mtu: removing [ 683.291326][ T5793] kernfs flags: removing [ 683.295661][ T5793] kernfs tx_queue_len: removing [ 683.300655][ T5793] kernfs gro_flush_timeout: removing [ 683.307021][ T5793] kernfs napi_defer_hard_irqs: removing [ 683.312669][ T5793] kernfs phys_port_id: removing [ 683.317648][ T5793] kernfs phys_port_name: removing [ 683.322922][ T5793] kernfs phys_switch_id: removing [ 683.328216][ T5793] kernfs proto_down: removing [ 683.332973][ T5793] kernfs carrier_up_count: removing [ 683.338465][ T5793] kernfs carrier_down_count: removing [ 683.343968][ T5793] kernfs threaded: removing [ 683.348839][ T5793] PM: Removing info for No Bus:syz_tun [ 683.354382][ T5793] kobject: 'syz_tun' (ffff88805f5c46f0): kobject_uevent_env [ 683.361815][ T5793] kobject: 'syz_tun' (ffff88805f5c46f0): fill_kobj_path: path = '/devices/virtual/net/syz_tun' [ 683.372668][ T5793] kernfs syz_tun: removing [ 683.381049][ T5449] Insert table=255 a9feb3fa/32 [ 683.386027][ T5449] AT ffff88801ff82100 s=40 16 [ 683.391738][ T5449] In tnode_resize ffff88801ff82120 inflate_threshold=50 threshold=25 [ 683.401265][ T5449] In inflate [ 683.404531][ T5449] AT ffff888026ee2100 s=40 32 [ 683.411887][ T5449] In tnode_resize ffff888030cd0320 inflate_threshold=50 threshold=25 [ 683.421611][ T5449] In tnode_resize ffff888024dfbf20 inflate_threshold=50 threshold=25 [ 683.428630][ T5793] kobject: 'syz_tun' (ffff88805f5c46f0): kobject_cleanup, parent 0000000000000000 [ 683.431983][ T5449] In tnode_resize ffff88802f8cce20 inflate_threshold=50 threshold=25 [ 683.446719][ T5793] kobject: 'syz_tun' (ffff88805f5c46f0): calling ktype release [ 683.454459][ T5449] Insert table=255 a9feffff/32 [ 683.456845][ T5793] kobject: 'syz_tun': free name [ 683.460615][ T5449] Insert table=255 a9feffff/32 [ 683.471289][ T5449] sctp: sctp_addr_wq_mgmt: add new entry for cmd:0, addr:169.254.179.250 in wq:ffffffff986f33d8 [ 683.485118][ T5449] Insert table=254 a9fe0000/16 [ 683.493584][ T1108] netdevsim netdevsim4 netdevsim2: bond_netdev_event received NETDEV_GOING_DOWN [ 683.504358][ T1108] net netdevsim2: siw: event 10 [ 683.537179][ T1108] netdevsim netdevsim4 netdevsim2: bond_netdev_event received NETDEV_DOWN [ 683.545795][ T1108] net netdevsim2: siw: event 2 [ 683.554558][ T1108] sctp: sctp_addr_wq_mgmt: add new entry for cmd:2, addr:fe80::9:6dff:fefd:b49d in wq:ffff88806b88add8 [ 683.571445][ T5117] sd 0:0:1:0: cmd ffff888025d11f10 CDB: 0x2a [ 683.596729][ T5117] Added buffer head 97 to ffff888022c7e000 [ 683.604224][ C1] virtqueue callback for ffff888022c7e000 (ffffffff857a8e40) [ 683.611685][ C1] sd 0:0:1:0: cmd ffff888025d11f10 response 0 status 0x0 sense_len 0 [ 683.619847][ C1] No more buffers in queue [ 683.637368][ T1108] netdevsim netdevsim4 netdevsim2 (unregistering): bond_netdev_event received NETDEV_UNREGISTER [ 683.644114][T10038] ffff88807a718000 name hci1 bus 0 [ 683.653824][ T24] sd 0:0:1:0: cmd ffff8880239c7910 CDB: 0x35 [ 683.659964][ T24] Added buffer head 97 to ffff888022c7e000 [ 683.665895][ C1] virtqueue callback for ffff888022c7e000 (ffffffff857a8e40) [ 683.667418][ T1108] net netdevsim2: siw: event 6 [ 683.673308][ C1] sd 0:0:1:0: cmd ffff8880239c7910 response 0 status 0x0 sense_len 0 [ 683.686186][ C1] No more buffers in queue [ 683.690878][ T24] sd 0:0:1:0: cmd ffff888025d122d0 CDB: 0x2a