last executing test programs: 12m45.25956988s ago: executing program 2 (id=18): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$xdp(0x2c, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x1, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x100}, 0x0, &(0x7f00000002c0)={0x3fc, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffd}, 0x0, 0x0) 12m43.832578367s ago: executing program 2 (id=20): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00 \x00'], 0x40}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmmsg$inet(r0, &(0x7f0000003cc0)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="14000000000000000000000007000000940400"], 0x18}}], 0x1, 0x44008004) write$binfmt_misc(r0, &(0x7f0000000300), 0xfdef) 12m42.377970417s ago: executing program 2 (id=22): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000240)=ANY=[@ANYBLOB='check=strict,session=0x0000000000000024,iocharset=ascii,overriderockperm,overriderockperm,gid=', @ANYRESOCT=0x0, @ANYRES16=0x0], 0xf6, 0xa15, &(0x7f00000002c0)="$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") lstat(&(0x7f0000000f40)='./file0\x00', &(0x7f0000000e40)) 12m41.917008794s ago: executing program 2 (id=25): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x2000, 0x20) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x181) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 12m41.349195791s ago: executing program 0 (id=26): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={0xffffffffffffffff, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) memfd_create(&(0x7f0000000300)='simple\x00', 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0xa, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000001c0)={0x2, @pix={0x0, 0x2, 0x34324241, 0x0, 0x101, 0x0, 0xa, 0x0, 0x0, 0x6, 0x0, 0x6}}) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000120a0900000009000200b35000000000"], 0x90}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r4, 0x1, 0x10000000000009, 0x0, 0x0) 12m40.522536509s ago: executing program 2 (id=28): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000002c0)="e8", 0x1, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001380)=0x40) 12m40.088824145s ago: executing program 0 (id=30): socket$inet(0x2, 0x1, 0x100) socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r5, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x1004) 12m39.944207957s ago: executing program 2 (id=31): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000200)=@sack_info={r3, 0x8, 0x1}, 0xc) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f00000000c0), &(0x7f0000000040)=0x2) socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x4, 0x4) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r5, 0x110, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x14}}, 0x0) 12m38.08349536s ago: executing program 32 (id=31): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000200)=@sack_info={r3, 0x8, 0x1}, 0xc) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f00000000c0), &(0x7f0000000040)=0x2) socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x4, 0x4) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r5, 0x110, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x14}}, 0x0) 12m38.07774191s ago: executing program 0 (id=33): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000780)=ANY=[@ANYBLOB="0a00000016000000000800007f0000", @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x3, 0x8, 0x2, 0xb}, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0x400d, 0x0, 0x9, 0x466}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 12m38.020539415s ago: executing program 1 (id=35): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x38, r1, 0x5, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x4}]}]}, 0x38}}, 0x0) 12m37.059954594s ago: executing program 0 (id=36): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x2000, 0x20) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x181) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 12m37.031792076s ago: executing program 0 (id=37): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(0x0, r0) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) 12m37.021452797s ago: executing program 1 (id=38): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) memfd_create(&(0x7f0000000300)='simple\x00', 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0xa, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000001c0)={0x2, @pix={0x0, 0x2, 0x34324241, 0x0, 0x101, 0x0, 0xa, 0x0, 0x0, 0x6, 0x0, 0x6}}) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000120a0900000009000200b35000000000"], 0x90}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r5, 0x1, 0x10000000000009, 0x0, 0x0) 12m36.100740573s ago: executing program 0 (id=39): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000002c0)="e8", 0x1, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001380)=0x40) 12m36.099852233s ago: executing program 1 (id=40): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x10, 0x803, 0x0) semctl$GETZCNT(0x0, 0x1, 0xf, 0x0) openat$nci(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0x6, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x20c00, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) fsetxattr$security_evm(r0, &(0x7f00000000c0), &(0x7f00000003c0)=@v2={0x6, 0x2, 0x7, 0xffff, 0x5b, "70f62f52aa92536602c8ce765cd5c6d9f59407254c81247c96c27a45f4bb057f05556326957c12700e67591711a21e398d80f3301764ad324bf5d07b6c7c7c0f70f82f379dd8c06c1d87a4ece54140e2337e0bd25899d06cf09c2e"}, 0x64, 0x1) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="041706004f00000001ca3c1bdd785630277068d487c54be1aa5429015449e856e51f69b4cd946872f98e9f17079f5045cff33862c2813c70385ff8e19fa83a90acd90ab4c4eab4cdf6050296de962acd"], 0x9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)) r3 = openat$uhid(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_INPUT(r3, &(0x7f0000002140)={0xc, {"a2e3ad214fc752f91b3e090987f70e06d038e7ff7fc6e5539b3264078b089b0e083839090890e0878f0f1ac6e7049b334c959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31310d3b5d0936cd3b78070daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5003a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f3d4ab966203861b5b15a841f2b575a8bd0d780231c9c99a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2e421ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803ed0aa5ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f068bb87af8b90fd8f08876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615ffb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd7072f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d27df2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb84bed4b281769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2c1cde360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e51074b41bc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000180)) write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) 12m34.113388976s ago: executing program 33 (id=39): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000002c0)="e8", 0x1, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001380)=0x40) 12m32.056690395s ago: executing program 1 (id=44): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x2000, 0x20) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x181) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 12m31.180098047s ago: executing program 1 (id=46): syz_usb_connect(0xc, 0x24, &(0x7f0000000100)=ANY=[], 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmsg$key(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[], 0x10}}, 0x8000) sendmsg$rds(r0, &(0x7f0000005980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, 0x0) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", 0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000000)=[{r7}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000070000000b0000002200000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000300"/28], 0x50) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) 12m30.78084284s ago: executing program 1 (id=48): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x14, 0x0, 0x800, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1f", 0x1}], 0x1}}], 0x1, 0x0) syz_usb_connect(0x4, 0x0, 0x0, 0x0) 12m30.479433015s ago: executing program 34 (id=48): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x14, 0x0, 0x800, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1f", 0x1}], 0x1}}], 0x1, 0x0) syz_usb_connect(0x4, 0x0, 0x0, 0x0) 12.92567556s ago: executing program 5 (id=1626): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newtaction={0x44, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x30, 0x1, [@m_ife={0x2c, 0xf, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x48c0) 12.4361164s ago: executing program 5 (id=1628): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000002280)={'nr0\x00', @broadcast}) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 9.408533716s ago: executing program 5 (id=1631): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x161141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000e40)={0x1, 0x0, [{0x0, 0xe3, &(0x7f00000008c0)=""/227}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000680)=0x41) 7.788270537s ago: executing program 3 (id=1635): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) semctl$GETZCNT(0x0, 0x1, 0xf, 0x0) openat$nci(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0x6, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) fsetxattr$security_evm(r0, &(0x7f00000000c0), &(0x7f00000003c0)=@v2={0x6, 0x2, 0x7, 0xffff, 0x56, "70f62f52aa92536602c8ce765cd5c6d9f59407254c81247c96c27a45f4bb057f05556326957c12700e67591711a21e398d80f3301764ad324bf5d07b6c7c7c0f70f82f379dd8c06c1d87a4ece54140e2337e0bd25899"}, 0x5f, 0x1) write$dsp(0xffffffffffffffff, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x24, 0x1, 0x0, 0x0, {{0x8, 0x7, 0x4}, {{0x1, 0x0, 0x1}, {0x4, 0x1, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x3}, {0xffffffffffffffff, 0x1, 0x8}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 7.734021562s ago: executing program 5 (id=1636): syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, &(0x7f0000000200)={0x8, 0x4, [0x7]}) socket$key(0xf, 0x3, 0x2) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000840)=""/127, 0x7f}, {&(0x7f0000001480)=""/127, 0x7f}, {&(0x7f00000000c0)=""/21, 0x15}, {&(0x7f00000004c0)=""/21, 0x15}], 0x11, 0x0, 0xfffffffffffffebc}, 0x4}], 0x2, 0x60, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0x2512, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x0) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 7.591135493s ago: executing program 6 (id=1637): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) 6.472030654s ago: executing program 3 (id=1638): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xc, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x9}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6.470780554s ago: executing program 6 (id=1646): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) semctl$GETZCNT(0x0, 0x1, 0xf, 0x0) openat$nci(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0x6, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) fsetxattr$security_evm(r0, &(0x7f00000000c0), &(0x7f00000003c0)=@v2={0x6, 0x2, 0x7, 0xffff, 0x56, "70f62f52aa92536602c8ce765cd5c6d9f59407254c81247c96c27a45f4bb057f05556326957c12700e67591711a21e398d80f3301764ad324bf5d07b6c7c7c0f70f82f379dd8c06c1d87a4ece54140e2337e0bd25899"}, 0x5f, 0x1) write$dsp(0xffffffffffffffff, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x24, 0x1, 0x0, 0x0, {{0x8, 0x7, 0x4}, {{0x1, 0x0, 0x1}, {0x4, 0x1, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x3}, {0xffffffffffffffff, 0x1, 0x8}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 5.968728925s ago: executing program 6 (id=1640): sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x3) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) set_mempolicy(0x8006, &(0x7f0000000340)=0x80000000fff, 0x5) recvmmsg(0xffffffffffffffff, &(0x7f0000008a00)=[{{&(0x7f0000000580)=@ethernet={0x0, @multicast}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000600)=""/118, 0x76}, {&(0x7f0000000780)=""/161, 0xa1}, {&(0x7f0000000880)=""/172, 0xac}, {&(0x7f0000000940)=""/214, 0xd6}, {&(0x7f0000000a40)=""/194, 0xc2}], 0x5, &(0x7f0000000b40)=""/109, 0x6d}, 0x1}, {{&(0x7f0000000bc0)=@rc, 0x80, &(0x7f0000001140)=[{&(0x7f0000000d40)=""/208, 0xd0}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f0000000e40)=""/124, 0x7c}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f00000023c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/95, 0x5f}, {&(0x7f00000010c0)=""/121, 0x79}], 0x7, &(0x7f0000001200)=""/65, 0x41}, 0x8}, {{&(0x7f0000001280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000004700)=[{&(0x7f00000033c0)=""/175, 0xaf}, {&(0x7f0000008c40)=""/4096, 0x1000}, {&(0x7f0000001300)=""/106, 0x6a}, {&(0x7f0000004480)=""/249, 0xf9}, {&(0x7f0000004580)=""/250, 0xfa}, {0x0}], 0x6, &(0x7f0000004780)=""/170, 0xaa}}, {{0x0, 0x0, &(0x7f0000005cc0)=[{&(0x7f0000004840)=""/80, 0x50}, {&(0x7f00000048c0)=""/71, 0x47}, {&(0x7f0000004940)=""/73, 0x49}, {&(0x7f00000049c0)=""/4096, 0x1000}, {&(0x7f00000059c0)=""/142, 0x8e}, {0x0}, {&(0x7f0000005b80)=""/71, 0x47}, {0x0}], 0x8, &(0x7f0000005d40)=""/187, 0xbb}, 0x3}, {{&(0x7f0000005e00)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000008100)=[{&(0x7f0000005e80)=""/4096, 0x1000}, {&(0x7f0000006e80)=""/4096, 0x1000}, {&(0x7f0000007e80)=""/171, 0xab}, {&(0x7f0000007f40)=""/166, 0xa6}, {&(0x7f0000008000)=""/242, 0xf2}], 0x5, &(0x7f0000000140)=""/33, 0x21}, 0x9}, {{&(0x7f0000008180)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000240)=[{&(0x7f0000008200)=""/100, 0x64}], 0x1, &(0x7f00000003c0)=""/17, 0x11}, 0x401}, {{&(0x7f0000008280)=@caif=@rfm, 0x80, &(0x7f0000000480)=[{&(0x7f0000008300)=""/176, 0xb0}, {&(0x7f00000083c0)=""/178, 0xb2}], 0x2, &(0x7f0000000500)=""/8, 0x8}, 0x1}, {{&(0x7f0000008480)=@nfc_llcp, 0x80, &(0x7f0000008640)=[{&(0x7f0000008500)=""/2, 0x2}, {&(0x7f0000008540)=""/254, 0xfe}], 0x2, &(0x7f0000008680)=""/68, 0x44}, 0x9}, {{&(0x7f0000008700)=@rc, 0x80, &(0x7f0000008980)=[{&(0x7f0000008780)=""/186, 0xba}, {&(0x7f0000008840)=""/164, 0xa4}, {&(0x7f0000008900)=""/123, 0x7b}], 0x3, &(0x7f00000089c0)}, 0x3}], 0x9, 0x10000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='T'], 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYBLOB, @ANYRES32=r0], 0x34}, 0x1, 0x0, 0x0, 0x4c401}, 0x4040140) r2 = socket$kcm(0x25, 0x1, 0x0) recvmsg$kcm(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x160) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$qrtrtun(r3, &(0x7f0000000300)="ca", 0x1) creat(&(0x7f0000001380)='./file0\x00', 0x4) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x40000000000800, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) 3.81721503s ago: executing program 5 (id=1642): r0 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0xad82, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x10000, &(0x7f0000000140)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@usrjquota}, {@bsdgroups}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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") ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000001c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000004c0), 0x208e24b) 3.81544025s ago: executing program 6 (id=1643): syz_clone3(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000001b40)={'bond0\x00', {0x2, 0x4e20, @empty}}) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r1, 0x5421, &(0x7f0000000140)=0x1) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) close(r1) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) 3.81475623s ago: executing program 3 (id=1644): r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x40082, 0x0) io_uring_enter(0xffffffffffffffff, 0x48e9, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001b00)=""/102392, 0x18ff8) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x101001, 0x50) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) 3.120125586s ago: executing program 3 (id=1645): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x161141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000e40)={0x1, 0x0, [{0x0, 0xe3, &(0x7f00000008c0)=""/227}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000680)=0x41) 3.112570857s ago: executing program 6 (id=1647): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$xfs(&(0x7f0000000500), &(0x7f0000009640)='./file0\x00', 0x208800, &(0x7f00000006c0)={[{@nogrpid}, {@prjquota}, {@ikeep}, {@inode32}]}, 0x4, 0x9606, &(0x7f0000012cc0)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) rename(&(0x7f0000001980)='./file1\x00', &(0x7f00000001c0)='./file0/file1\x00') r3 = open(&(0x7f0000000580)='./file1\x00', 0x80042, 0x43) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xb, 0x0, {{0x3, 0x3, 0x7ffc, 0x2, 0x5, 0x40, {0x800000001, 0x180, 0x20ff, 0x9, 0x89, 0xd614, 0x5, 0x80000041, 0xfffffffe, 0x6000, 0x2, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x1a}}}, 0xa0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) sendfile(r3, r3, &(0x7f0000000480), 0x7f03) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x32314247}}) 3.110492337s ago: executing program 4 (id=1648): r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0xb) utimensat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000500)={{}, {0x0, 0x2710}}, 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') 2.83363671s ago: executing program 4 (id=1649): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) socket(0x2, 0x80805, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000000)={0x0, r3, 0x1, 0x0, 0x3}) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000100)) pipe(&(0x7f0000000080)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) epoll_pwait2(r4, &(0x7f00000002c0)=[{}, {}], 0x2, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, 0x0, &(0x7f0000000240), 0x5005) 2.268105615s ago: executing program 4 (id=1650): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) semctl$GETZCNT(0x0, 0x1, 0xf, 0x0) openat$nci(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0x6, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) fsetxattr$security_evm(r0, &(0x7f00000000c0), &(0x7f00000003c0)=@v2={0x6, 0x2, 0x7, 0xffff, 0x56, "70f62f52aa92536602c8ce765cd5c6d9f59407254c81247c96c27a45f4bb057f05556326957c12700e67591711a21e398d80f3301764ad324bf5d07b6c7c7c0f70f82f379dd8c06c1d87a4ece54140e2337e0bd25899"}, 0x5f, 0x1) write$dsp(0xffffffffffffffff, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x24, 0x1, 0x0, 0x0, {{0x8, 0x7, 0x4}, {{0x1, 0x0, 0x1}, {0x4, 0x1, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x3}, {0xffffffffffffffff, 0x1, 0x8}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 2.174360553s ago: executing program 5 (id=1651): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf0ff}}}, 0x0) 1.96715155s ago: executing program 4 (id=1652): sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x3) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) set_mempolicy(0x8006, &(0x7f0000000340)=0x80000000fff, 0x5) recvmmsg(0xffffffffffffffff, &(0x7f0000008a00)=[{{&(0x7f0000000580)=@ethernet={0x0, @multicast}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000600)=""/118, 0x76}, {&(0x7f0000000780)=""/161, 0xa1}, {&(0x7f0000000880)=""/172, 0xac}, {&(0x7f0000000940)=""/214, 0xd6}, {&(0x7f0000000a40)=""/194, 0xc2}], 0x5, &(0x7f0000000b40)=""/109, 0x6d}, 0x1}, {{&(0x7f0000000bc0)=@rc, 0x80, &(0x7f0000001140)=[{&(0x7f0000000d40)=""/208, 0xd0}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f0000000e40)=""/124, 0x7c}, {&(0x7f0000000ec0)=""/71, 0x47}, {&(0x7f00000023c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/95, 0x5f}, {&(0x7f00000010c0)=""/121, 0x79}], 0x7, &(0x7f0000001200)=""/65, 0x41}, 0x8}, {{&(0x7f0000001280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000004700)=[{&(0x7f00000033c0)=""/175, 0xaf}, {&(0x7f0000008c40)=""/4096, 0x1000}, {&(0x7f0000001300)=""/106, 0x6a}, {&(0x7f0000004480)=""/249, 0xf9}, {&(0x7f0000004580)=""/250, 0xfa}, {0x0}], 0x6, &(0x7f0000004780)=""/170, 0xaa}}, {{0x0, 0x0, &(0x7f0000005cc0)=[{&(0x7f0000004840)=""/80, 0x50}, {&(0x7f00000048c0)=""/71, 0x47}, {&(0x7f0000004940)=""/73, 0x49}, {&(0x7f00000049c0)=""/4096, 0x1000}, {&(0x7f00000059c0)=""/142, 0x8e}, {0x0}, {&(0x7f0000005b80)=""/71, 0x47}, {0x0}], 0x8, &(0x7f0000005d40)=""/187, 0xbb}, 0x3}, {{&(0x7f0000005e00)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000008100)=[{&(0x7f0000005e80)=""/4096, 0x1000}, {&(0x7f0000006e80)=""/4096, 0x1000}, {&(0x7f0000007e80)=""/171, 0xab}, {&(0x7f0000007f40)=""/166, 0xa6}, {&(0x7f0000008000)=""/242, 0xf2}], 0x5, &(0x7f0000000140)=""/33, 0x21}, 0x9}, {{&(0x7f0000008180)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000240)=[{&(0x7f0000008200)=""/100, 0x64}], 0x1, &(0x7f00000003c0)=""/17, 0x11}, 0x401}, {{&(0x7f0000008280)=@caif=@rfm, 0x80, &(0x7f0000000480)=[{&(0x7f0000008300)=""/176, 0xb0}, {&(0x7f00000083c0)=""/178, 0xb2}], 0x2, &(0x7f0000000500)=""/8, 0x8}, 0x1}, {{&(0x7f0000008480)=@nfc_llcp, 0x80, &(0x7f0000008640)=[{&(0x7f0000008500)=""/2, 0x2}, {&(0x7f0000008540)=""/254, 0xfe}], 0x2, &(0x7f0000008680)=""/68, 0x44}, 0x9}, {{&(0x7f0000008700)=@rc, 0x80, &(0x7f0000008980)=[{&(0x7f0000008780)=""/186, 0xba}, {&(0x7f0000008840)=""/164, 0xa4}, {&(0x7f0000008900)=""/123, 0x7b}], 0x3, &(0x7f00000089c0)}, 0x3}], 0x9, 0x10000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='T'], 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYBLOB, @ANYRES32=r0], 0x34}, 0x1, 0x0, 0x0, 0x4c401}, 0x4040140) r2 = socket$kcm(0x25, 0x1, 0x0) recvmsg$kcm(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x160) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$qrtrtun(r3, &(0x7f0000000300)="ca", 0x1) creat(&(0x7f0000001380)='./file0\x00', 0x4) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x40000000000800, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) 1.920142004s ago: executing program 3 (id=1653): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 314.614224ms ago: executing program 6 (id=1654): r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x40082, 0x0) io_uring_enter(0xffffffffffffffff, 0x48e9, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001b00)=""/102392, 0x18ff8) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, 0x0, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) 286.175647ms ago: executing program 4 (id=1655): syz_clone3(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000001b40)={'bond0\x00', {0x2, 0x4e20, @empty}}) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r1, 0x5421, &(0x7f0000000140)=0x1) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) close(r1) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) 217.011822ms ago: executing program 3 (id=1656): ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x7, 0xfff, 0x7}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300), &(0x7f00000001c0), 0xd35, r1}, 0x38) 0s ago: executing program 4 (id=1657): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) write$sysctl(r1, &(0x7f0000000000)='2\x00', 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.67' (ED25519) to the list of known hosts. [ 75.627857][ T5775] cgroup: Unknown subsys name 'net' [ 75.793384][ T5775] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.478428][ T5775] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.750985][ T5787] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.760497][ T5792] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.781679][ T5797] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.790736][ T5797] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.800150][ T5797] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.808822][ T5797] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.834284][ T5787] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.842222][ T5787] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.846202][ T5792] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.857494][ T5800] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.857632][ T5792] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.866676][ T5787] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.873360][ T5792] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 79.880252][ T5787] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.886900][ T5792] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.893329][ T5787] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.907928][ T5792] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.911803][ T5787] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.915972][ T50] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 79.923493][ T5787] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 79.930431][ T5792] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 79.938168][ T5787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.943770][ T5792] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.964508][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.478490][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 80.561022][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 80.715829][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.723072][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.731028][ T5789] bridge_slave_0: entered allmulticast mode [ 80.738455][ T5789] bridge_slave_0: entered promiscuous mode [ 80.747195][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 80.757758][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 80.791239][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.798585][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.806160][ T5789] bridge_slave_1: entered allmulticast mode [ 80.813190][ T5789] bridge_slave_1: entered promiscuous mode [ 80.852245][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.859546][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.866884][ T5796] bridge_slave_0: entered allmulticast mode [ 80.874017][ T5796] bridge_slave_0: entered promiscuous mode [ 80.921121][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.928824][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.936161][ T5796] bridge_slave_1: entered allmulticast mode [ 80.943873][ T5796] bridge_slave_1: entered promiscuous mode [ 80.966041][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.979644][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.093783][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.133269][ T5789] team0: Port device team_slave_0 added [ 81.140824][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.148166][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.155994][ T5793] bridge_slave_0: entered allmulticast mode [ 81.163120][ T5793] bridge_slave_0: entered promiscuous mode [ 81.173144][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.194917][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.202146][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.210904][ T5784] bridge_slave_0: entered allmulticast mode [ 81.218047][ T5784] bridge_slave_0: entered promiscuous mode [ 81.226901][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.234068][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.241341][ T5784] bridge_slave_1: entered allmulticast mode [ 81.248631][ T5784] bridge_slave_1: entered promiscuous mode [ 81.257838][ T5789] team0: Port device team_slave_1 added [ 81.275834][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.283056][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.290489][ T5793] bridge_slave_1: entered allmulticast mode [ 81.298109][ T5793] bridge_slave_1: entered promiscuous mode [ 81.321434][ T5796] team0: Port device team_slave_0 added [ 81.385198][ T5796] team0: Port device team_slave_1 added [ 81.395365][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.408043][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.418452][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.425943][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.452003][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.479535][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.513765][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.520888][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.547327][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.568523][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.622913][ T5784] team0: Port device team_slave_0 added [ 81.632757][ T5784] team0: Port device team_slave_1 added [ 81.656190][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.663202][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.689647][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.702490][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.709634][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.736661][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.763724][ T5793] team0: Port device team_slave_0 added [ 81.820974][ T5793] team0: Port device team_slave_1 added [ 81.854327][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.861367][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.887580][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.905338][ T5789] hsr_slave_0: entered promiscuous mode [ 81.911827][ T5789] hsr_slave_1: entered promiscuous mode [ 81.920501][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.929229][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.955635][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.968357][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.975491][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.001923][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.012697][ T50] Bluetooth: hci1: command tx timeout [ 82.012720][ T5101] Bluetooth: hci2: command tx timeout [ 82.018863][ T50] Bluetooth: hci0: command tx timeout [ 82.024381][ T5101] Bluetooth: hci3: command tx timeout [ 82.037630][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.044865][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.070815][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.180897][ T5796] hsr_slave_0: entered promiscuous mode [ 82.188204][ T5796] hsr_slave_1: entered promiscuous mode [ 82.195811][ T5796] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.203730][ T5796] Cannot create hsr debugfs directory [ 82.228286][ T5793] hsr_slave_0: entered promiscuous mode [ 82.235165][ T5793] hsr_slave_1: entered promiscuous mode [ 82.241545][ T5793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.249790][ T5793] Cannot create hsr debugfs directory [ 82.270086][ T5784] hsr_slave_0: entered promiscuous mode [ 82.277686][ T5784] hsr_slave_1: entered promiscuous mode [ 82.284030][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.291751][ T5784] Cannot create hsr debugfs directory [ 82.725631][ T5789] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.738332][ T5789] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.766038][ T5789] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.777879][ T5789] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.858921][ T5793] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.873650][ T5793] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.890307][ T5793] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.900656][ T5793] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.998978][ T5784] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.010688][ T5784] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.030323][ T5784] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.040640][ T5784] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.146532][ T5796] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.158927][ T5796] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.172520][ T5796] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.183892][ T5796] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.200646][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.238715][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.276755][ T991] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.284128][ T991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.296616][ T991] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.303794][ T991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.411879][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.473306][ T5789] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.500407][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.521500][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.561866][ T991] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.569134][ T991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.590848][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.598123][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.629930][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.642547][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.693375][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.703036][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.710294][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.732546][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.739784][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.781756][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.789053][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.808323][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.815593][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.903550][ T5793] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.950436][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.049077][ T5796] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.085355][ T5101] Bluetooth: hci3: command tx timeout [ 84.090878][ T5101] Bluetooth: hci0: command tx timeout [ 84.097014][ T5795] Bluetooth: hci2: command tx timeout [ 84.097036][ T50] Bluetooth: hci1: command tx timeout [ 84.147501][ T5789] veth0_vlan: entered promiscuous mode [ 84.196934][ T5789] veth1_vlan: entered promiscuous mode [ 84.297703][ T5789] veth0_macvtap: entered promiscuous mode [ 84.328040][ T5789] veth1_macvtap: entered promiscuous mode [ 84.378859][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.406654][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.457856][ T5789] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.474912][ T5789] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.483682][ T5789] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.492807][ T5789] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.521471][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.603934][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.643515][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.746816][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.757425][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.796649][ T5793] veth0_vlan: entered promiscuous mode [ 84.807716][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.823799][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.842836][ T5793] veth1_vlan: entered promiscuous mode [ 84.863811][ T5784] veth0_vlan: entered promiscuous mode [ 84.908734][ T5784] veth1_vlan: entered promiscuous mode [ 84.969495][ T5796] veth0_vlan: entered promiscuous mode [ 85.003160][ T5796] veth1_vlan: entered promiscuous mode [ 85.053442][ T5784] veth0_macvtap: entered promiscuous mode [ 85.062696][ T5873] syz.1.2[5873]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 85.071509][ T5793] veth0_macvtap: entered promiscuous mode [ 85.092701][ T5784] veth1_macvtap: entered promiscuous mode [ 85.102544][ T5793] veth1_macvtap: entered promiscuous mode [ 85.173956][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.190649][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.213788][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.226685][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.237440][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.251500][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.265140][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.276369][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.289354][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.301306][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.313897][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.345304][ T5793] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.361149][ T5793] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.372714][ T5793] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.387779][ T5793] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.406651][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.424090][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.435790][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.454065][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.466324][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.490374][ T5796] veth0_macvtap: entered promiscuous mode [ 85.518686][ T5784] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.530128][ T5784] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.540010][ T5784] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.549647][ T5784] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.600997][ T5873] loop1: detected capacity change from 0 to 32768 [ 85.617868][ T5873] XFS: ikeep mount option is deprecated. [ 85.638567][ T5796] veth1_macvtap: entered promiscuous mode [ 85.695406][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.703284][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.782950][ T5873] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 85.826945][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.842684][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.853839][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.867577][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.877933][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.888882][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.917923][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.927542][ T5873] XFS (loop1): Ending clean mount [ 85.943701][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.958042][ T5873] XFS (loop1): Quotacheck needed: Please wait. [ 85.960683][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.991384][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.009999][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.029037][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.031338][ T5873] XFS (loop1): Quotacheck: Done. [ 86.040313][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.074434][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.090561][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.102999][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.129874][ T5796] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.159211][ T5796] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.182920][ T50] Bluetooth: hci0: command tx timeout [ 86.188710][ T50] Bluetooth: hci2: command tx timeout [ 86.194153][ T50] Bluetooth: hci3: command tx timeout [ 86.200299][ T50] Bluetooth: hci1: command tx timeout [ 86.224257][ T5796] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.249739][ T5796] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.385981][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.395976][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.403845][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.432054][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.992876][ T991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.039460][ T5789] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 87.059344][ T991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.364958][ T5893] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 87.651218][ T3469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.875029][ T3469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.261038][ T5101] Bluetooth: hci1: command tx timeout [ 88.267183][ T5101] Bluetooth: hci3: command tx timeout [ 88.272635][ T5101] Bluetooth: hci2: command tx timeout [ 88.279067][ T5101] Bluetooth: hci0: command tx timeout [ 88.465526][ T5901] process 'syz.2.3' launched './file0/file2' with NULL argv: empty string added [ 88.520738][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 88.529697][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 88.565178][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 88.594686][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.330528][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.434502][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.464311][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 89.749910][ T5916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8'. [ 90.085112][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 90.261712][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 90.270779][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 90.888029][ T5907] loop1: detected capacity change from 0 to 32768 [ 90.916028][ T5907] ======================================================= [ 90.916028][ T5907] WARNING: The mand mount option has been deprecated and [ 90.916028][ T5907] and is ignored by this kernel. Remove the mand [ 90.916028][ T5907] option from the mount to silence this warning. [ 90.916028][ T5907] ======================================================= [ 91.168134][ T5907] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 91.959232][ T5907] (syz.1.5,5907,1):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 92.003438][ T5907] (syz.1.5,5907,1):update_backups:188 ERROR: status = -12 [ 92.017484][ T5907] ocfs2: Failed to update super blocks on 7,1 during fs resize. This condition is not fatal, but fsck.ocfs2 should be run to fix it [ 92.170760][ T23] cfg80211: failed to load regulatory.db [ 92.219973][ T5930] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.271328][ T5789] ocfs2: Unmounting device (7,1) on (node local) [ 92.819658][ T5940] loop0: detected capacity change from 0 to 128 [ 92.841521][ T5940] gfs2: gfs2 mount does not exist [ 93.012521][ T5943] loop3: detected capacity change from 0 to 64 [ 93.504738][ T5947] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.059596][ T5958] loop2: detected capacity change from 0 to 1764 [ 96.484267][ T5964] loop3: detected capacity change from 0 to 64 [ 96.631628][ T5964] hfs: unable to locate alternate MDB [ 96.769004][ T5964] hfs: continuing without an alternate MDB [ 96.934575][ T5964] hfs: request for non-existent node 293 in B*Tree [ 96.952996][ T5964] hfs: request for non-existent node 293 in B*Tree [ 96.968076][ T5964] hfs: get root inode failed [ 97.288490][ T5970] netlink: 32 bytes leftover after parsing attributes in process `syz.0.26'. [ 98.180969][ T5980] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.235650][ T3488] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.928893][ T3488] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.111416][ T3488] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.222821][ T3488] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.644556][ T6007] netlink: 32 bytes leftover after parsing attributes in process `syz.1.38'. [ 102.183202][ T5792] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 102.193308][ T5792] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 102.204581][ T5792] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 102.233440][ T5792] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 102.251279][ T5792] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 102.260641][ T5792] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 104.324778][ T5101] Bluetooth: hci0: command tx timeout [ 106.404402][ T5101] Bluetooth: hci0: command tx timeout [ 107.324958][ T5792] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 107.336778][ T5792] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 107.352856][ T5792] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 107.378023][ T6013] chnl_net:caif_netlink_parms(): no params data found [ 107.390085][ T5792] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 107.401457][ T5792] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 107.414569][ T5792] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 107.525344][ T5116] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 107.651028][ T3488] hsr_slave_0: left promiscuous mode [ 107.661240][ T3488] hsr_slave_1: left promiscuous mode [ 107.672208][ T3488] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.683509][ T3488] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.699373][ T3488] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.708502][ T3488] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.714657][ T5116] usb 4-1: Using ep0 maxpacket: 16 [ 107.721668][ T3488] bridge_slave_1: left allmulticast mode [ 107.727944][ T3488] bridge_slave_1: left promiscuous mode [ 107.734917][ T3488] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.750428][ T3488] bridge_slave_0: left allmulticast mode [ 107.757121][ T3488] bridge_slave_0: left promiscuous mode [ 107.762933][ T3488] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.763031][ T5116] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 107.801538][ T5116] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.817469][ T5116] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 107.828110][ T3488] veth1_macvtap: left promiscuous mode [ 107.833672][ T5116] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 107.836268][ T3488] veth0_macvtap: left promiscuous mode [ 107.854242][ T5116] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.855654][ T3488] veth1_vlan: left promiscuous mode [ 107.862311][ T5116] usb 4-1: Product: syz [ 107.873181][ T3488] veth0_vlan: left promiscuous mode [ 107.884320][ T5116] usb 4-1: Manufacturer: syz [ 107.893091][ T5116] usb 4-1: SerialNumber: syz [ 108.211833][ T5792] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 108.229201][ T5792] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 108.247604][ T5792] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 108.258412][ T5792] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 108.267587][ T5792] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 108.275265][ T5792] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 108.330029][ T5116] usb 4-1: 0:2 : does not exist [ 108.486671][ T5101] Bluetooth: hci0: command tx timeout [ 108.651077][ T3488] team0 (unregistering): Port device team_slave_1 removed [ 108.693584][ T3488] team0 (unregistering): Port device team_slave_0 removed [ 108.743276][ T3488] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.789205][ T3488] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.280838][ T3488] bond0 (unregistering): Released all slaves [ 109.450984][ T5101] Bluetooth: hci1: command tx timeout [ 109.461670][ T6013] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.470680][ T6013] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.487719][ T6013] bridge_slave_0: entered allmulticast mode [ 109.496652][ T6013] bridge_slave_0: entered promiscuous mode [ 109.553757][ T6013] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.563966][ T6013] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.572925][ T6013] bridge_slave_1: entered allmulticast mode [ 109.581752][ T6013] bridge_slave_1: entered promiscuous mode [ 109.647524][ T6013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.703322][ T6013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.770769][ T5116] usb 4-1: 1:0: cannot get min/max values for control 6 (id 1) [ 109.827839][ T6013] team0: Port device team_slave_0 added [ 109.842209][ T6013] team0: Port device team_slave_1 added [ 109.880721][ T5116] usb 4-1: USB disconnect, device number 2 [ 109.970691][ T6006] udevd[6006]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: Permission denied [ 110.042766][ T6013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.064285][ T6013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.092270][ T6013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.106691][ T6013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.113783][ T6013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.140912][ T6013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.243790][ T6013] hsr_slave_0: entered promiscuous mode [ 110.250750][ T6013] hsr_slave_1: entered promiscuous mode [ 110.257847][ T6013] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.266789][ T6013] Cannot create hsr debugfs directory [ 110.324370][ T5101] Bluetooth: hci3: command tx timeout [ 110.565812][ T5101] Bluetooth: hci0: command tx timeout [ 111.431753][ T6060] chnl_net:caif_netlink_parms(): no params data found [ 111.524724][ T5101] Bluetooth: hci1: command tx timeout [ 112.130753][ T6055] chnl_net:caif_netlink_parms(): no params data found [ 112.264822][ T3488] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.399011][ T6060] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.406222][ T5101] Bluetooth: hci3: command tx timeout [ 112.430681][ T6097] loop3: detected capacity change from 0 to 4096 [ 112.434685][ T6060] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.444443][ T6060] bridge_slave_0: entered allmulticast mode [ 112.451708][ T6060] bridge_slave_0: entered promiscuous mode [ 112.484135][ T3488] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.577568][ T6060] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.613454][ T6060] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.624962][ T6060] bridge_slave_1: entered allmulticast mode [ 112.636198][ T6060] bridge_slave_1: entered promiscuous mode [ 112.637110][ T6097] ntfs3: loop3: ino=b, Correct links count -> 1. [ 112.669082][ T6097] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 112.740273][ T3488] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.777943][ T28] audit: type=1800 audit(1755878917.613:2): pid=6097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.53" name="file1" dev="loop3" ino=33 res=0 errno=0 [ 112.816753][ T6060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.121311][ T3488] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.200612][ T6060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.307750][ T6055] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.333001][ T6055] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.350724][ T6055] bridge_slave_0: entered allmulticast mode [ 113.361507][ T6055] bridge_slave_0: entered promiscuous mode [ 113.384561][ T6055] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.391754][ T6055] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.404947][ T6055] bridge_slave_1: entered allmulticast mode [ 113.412632][ T6055] bridge_slave_1: entered promiscuous mode [ 113.548246][ T6060] team0: Port device team_slave_0 added [ 113.615151][ T5101] Bluetooth: hci1: command tx timeout [ 113.627295][ T6060] team0: Port device team_slave_1 added [ 113.780972][ T6055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.866427][ T6055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.966476][ T6060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.973607][ T6060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.002967][ T6060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.109590][ T3488] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.211478][ T6060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.230496][ T6060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.262258][ T6060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.283650][ T6013] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 114.300440][ T6013] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 114.332511][ T3488] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.375087][ T6055] team0: Port device team_slave_0 added [ 114.408016][ T6013] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 114.455643][ T6055] team0: Port device team_slave_1 added [ 114.484581][ T5101] Bluetooth: hci3: command tx timeout [ 114.517353][ T3488] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.606366][ T6013] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 114.728865][ T3488] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.802928][ T6060] hsr_slave_0: entered promiscuous mode [ 114.812932][ T6060] hsr_slave_1: entered promiscuous mode [ 114.823891][ T6060] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.832241][ T6060] Cannot create hsr debugfs directory [ 114.858280][ T6055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.866393][ T6055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.893299][ T6055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.982579][ T6055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.991385][ T6055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.025070][ T6055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.457434][ T6055] hsr_slave_0: entered promiscuous mode [ 115.484992][ T6055] hsr_slave_1: entered promiscuous mode [ 115.503194][ T6055] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.524386][ T6055] Cannot create hsr debugfs directory [ 115.690431][ T5101] Bluetooth: hci1: command tx timeout [ 116.565176][ T5101] Bluetooth: hci3: command tx timeout [ 116.643359][ T6060] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 116.742253][ T6060] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 116.786910][ T6013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.834000][ T6060] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 116.848554][ T6060] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 117.026107][ T6013] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.062347][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.069570][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.173478][ T6055] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 117.187762][ T991] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.194979][ T991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.218075][ T6055] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 117.249073][ T6055] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 117.284732][ T6055] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 117.653964][ T3488] hsr_slave_0: left promiscuous mode [ 117.690173][ T3488] hsr_slave_1: left promiscuous mode [ 117.699391][ T3488] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.715086][ T3488] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.731280][ T3488] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.732769][ T6167] loop3: detected capacity change from 0 to 128 [ 117.739088][ T3488] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.754375][ T3488] bridge_slave_1: left allmulticast mode [ 117.760075][ T3488] bridge_slave_1: left promiscuous mode [ 117.768451][ T3488] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.793826][ T3488] bridge_slave_0: left allmulticast mode [ 117.800542][ T3488] bridge_slave_0: left promiscuous mode [ 117.818450][ T3488] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.851864][ T3488] hsr_slave_0: left promiscuous mode [ 117.863107][ T3488] hsr_slave_1: left promiscuous mode [ 117.891409][ T3488] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.903608][ T3488] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.920171][ T3488] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.930015][ T3488] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.938312][ T6167] syz.3.55: attempt to access beyond end of device [ 117.938312][ T6167] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 117.952697][ T3488] bridge_slave_1: left allmulticast mode [ 117.965509][ T3488] bridge_slave_1: left promiscuous mode [ 117.972137][ T3488] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.992442][ T3488] bridge_slave_0: left allmulticast mode [ 117.998465][ T3488] bridge_slave_0: left promiscuous mode [ 118.004774][ T3488] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.051882][ T6167] syz.3.55: attempt to access beyond end of device [ 118.051882][ T6167] loop3: rw=524288, sector=897, nr_sectors = 144 limit=128 [ 118.069768][ T6167] syz.3.55: attempt to access beyond end of device [ 118.069768][ T6167] loop3: rw=0, sector=1025, nr_sectors = 8 limit=128 [ 118.070015][ T3488] veth1_macvtap: left promiscuous mode [ 118.084980][ T6167] syz.3.55: attempt to access beyond end of device [ 118.084980][ T6167] loop3: rw=0, sector=1025, nr_sectors = 8 limit=128 [ 118.098150][ T3488] veth0_macvtap: left promiscuous mode [ 118.103263][ T6167] syz.3.55: attempt to access beyond end of device [ 118.103263][ T6167] loop3: rw=0, sector=1025, nr_sectors = 8 limit=128 [ 118.115812][ T3488] veth1_vlan: left promiscuous mode [ 118.125660][ T6167] syz.3.55: attempt to access beyond end of device [ 118.125660][ T6167] loop3: rw=0, sector=1025, nr_sectors = 8 limit=128 [ 118.133415][ T3488] veth0_vlan: left promiscuous mode [ 118.139953][ T6167] syz.3.55: attempt to access beyond end of device [ 118.139953][ T6167] loop3: rw=0, sector=1025, nr_sectors = 8 limit=128 [ 118.160921][ T3488] veth1_macvtap: left promiscuous mode [ 118.165272][ T6167] syz.3.55: attempt to access beyond end of device [ 118.165272][ T6167] loop3: rw=0, sector=1025, nr_sectors = 8 limit=128 [ 118.167081][ T3488] veth0_macvtap: left promiscuous mode [ 118.187102][ T3488] veth1_vlan: left promiscuous mode [ 118.188869][ T6167] syz.3.55: attempt to access beyond end of device [ 118.188869][ T6167] loop3: rw=0, sector=1025, nr_sectors = 8 limit=128 [ 118.193875][ T3488] veth0_vlan: left promiscuous mode [ 118.215454][ T6167] syz.3.55: attempt to access beyond end of device [ 118.215454][ T6167] loop3: rw=0, sector=1025, nr_sectors = 8 limit=128 [ 119.333893][ T3488] team0 (unregistering): Port device team_slave_1 removed [ 119.429984][ T3488] team0 (unregistering): Port device team_slave_0 removed [ 119.491335][ T3488] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.695915][ T3488] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.130739][ T3488] bond0 (unregistering): Released all slaves [ 121.659874][ T3488] team0 (unregistering): Port device team_slave_1 removed [ 121.702898][ T3488] team0 (unregistering): Port device team_slave_0 removed [ 121.745833][ T3488] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.794532][ T3488] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.228404][ T3488] bond0 (unregistering): Released all slaves [ 122.573060][ T6060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.642398][ T6055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.757918][ T6060] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.792298][ T6055] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.858802][ T5897] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.866013][ T5897] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.906932][ T5897] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.914082][ T5897] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.938718][ T5897] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.946024][ T5897] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.021936][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.029164][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.076464][ T6013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.755382][ T6055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.840533][ T6060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.897808][ T6013] veth0_vlan: entered promiscuous mode [ 123.923296][ T6013] veth1_vlan: entered promiscuous mode [ 124.007840][ T6013] veth0_macvtap: entered promiscuous mode [ 124.028722][ T6013] veth1_macvtap: entered promiscuous mode [ 124.079513][ T6013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.102254][ T6013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.126636][ T6013] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.149444][ T6013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.170794][ T6013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.196144][ T6013] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.236211][ T6013] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.247276][ T6013] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.256851][ T6013] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.282526][ T6013] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.609909][ T3469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.648860][ T3469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.752931][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.767677][ T6055] veth0_vlan: entered promiscuous mode [ 124.784546][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.887198][ T6055] veth1_vlan: entered promiscuous mode [ 125.115202][ T6060] veth0_vlan: entered promiscuous mode [ 125.131327][ T6055] veth0_macvtap: entered promiscuous mode [ 125.191076][ T6055] veth1_macvtap: entered promiscuous mode [ 125.400991][ T6060] veth1_vlan: entered promiscuous mode [ 125.510877][ T6055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.522041][ T6055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.532779][ T6055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.543770][ T6055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.563913][ T6055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.642133][ T6055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.720626][ T6055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.774083][ T6055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.843317][ T6055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.886021][ T6055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.993736][ T6055] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.043814][ T6055] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.093625][ T6055] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.120421][ T6055] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.166214][ T6060] veth0_macvtap: entered promiscuous mode [ 126.208740][ T6060] veth1_macvtap: entered promiscuous mode [ 126.341261][ T6060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.378514][ T6060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.413941][ T6060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.441764][ T6060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.453988][ T6060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.465113][ T6060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.490442][ T6060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.621909][ T6060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.638876][ T6060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.650960][ T6060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.667838][ T6060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.680174][ T6060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.694601][ T6060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.713081][ T6060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.761452][ T3469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.786462][ T6060] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.799542][ T3469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.806098][ T6060] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.828728][ T6060] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.848724][ T6060] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.001048][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.032003][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.100620][ T3469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.126496][ T3469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.249056][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.274741][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.447814][ T6306] sp0: Synchronizing with TNC [ 133.155121][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.162268][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.183870][ T6379] Zero length message leads to an empty skb [ 138.357071][ T6407] netlink: 32 bytes leftover after parsing attributes in process `syz.3.85'. [ 138.968096][ T6411] syz_tun: entered allmulticast mode [ 139.013474][ T6411] dvmrp1: entered allmulticast mode [ 139.073632][ T6410] syz_tun: left allmulticast mode [ 139.763171][ T6434] netlink: 'syz.6.92': attribute type 4 has an invalid length. [ 141.882162][ T6457] netlink: 32 bytes leftover after parsing attributes in process `syz.5.95'. [ 142.942589][ T6448] loop4: detected capacity change from 0 to 40427 [ 143.106068][ T6448] F2FS-fs (loop4): Found nat_bits in checkpoint [ 143.295986][ T6448] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 143.440047][ T6448] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 143.761943][ T6013] bio_check_eod: 3748 callbacks suppressed [ 143.761961][ T6013] syz-executor: attempt to access beyond end of device [ 143.761961][ T6013] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 143.826270][ T6013] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 144.326801][ T6472] loop5: detected capacity change from 0 to 32768 [ 144.510256][ T6472] JBD2: Ignoring recovery information on journal [ 144.664729][ T6472] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 144.945739][ T6472] OCFS2: ERROR (device loop5): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bad parent pointer (17179869255, expected 71) [ 145.033963][ T6472] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 145.067426][ T6472] OCFS2: File system is now read-only. [ 145.068928][ T6508] netlink: 32 bytes leftover after parsing attributes in process `syz.6.104'. [ 145.119872][ T6472] (syz.5.98,6472,1):ocfs2_trim_mainbm:7611 ERROR: status = -30 [ 145.555346][ T6055] ocfs2: Unmounting device (7,5) on (node local) [ 146.852764][ T6525] syz.4.109 uses obsolete (PF_INET,SOCK_PACKET) [ 146.883275][ T6532] loop6: detected capacity change from 0 to 128 [ 146.910337][ T6532] gfs2: gfs2 mount does not exist [ 147.397752][ T6543] loop5: detected capacity change from 0 to 1024 [ 147.971825][ T6548] netlink: 32 bytes leftover after parsing attributes in process `syz.4.114'. [ 149.197009][ T3469] hfsplus: b-tree write err: -5, ino 4 [ 151.126263][ T5101] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 151.135028][ T5101] Bluetooth: hci1: Injecting HCI hardware error event [ 151.143680][ T5101] Bluetooth: hci1: hardware error 0x00 [ 151.324055][ T6577] loop3: detected capacity change from 0 to 512 [ 151.360875][ T6577] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 151.391393][ T6581] loop4: detected capacity change from 0 to 1024 [ 151.428375][ T6577] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c11c, mo2=0102] [ 151.514408][ T5896] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 151.558038][ T6577] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2244: inode #15: comm syz.3.122: corrupted in-inode xattr: e_value size too large [ 151.593305][ T3469] hfsplus: b-tree write err: -5, ino 4 [ 151.653917][ T6577] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.122: couldn't read orphan inode 15 (err -117) [ 151.723893][ T6577] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.774553][ T5896] usb 7-1: Using ep0 maxpacket: 16 [ 151.792576][ T5896] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 151.822063][ T5896] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.883942][ T5896] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 151.960324][ T5896] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 151.979812][ T5896] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.997557][ T5896] usb 7-1: Product: syz [ 152.222420][ T5896] usb 7-1: Manufacturer: syz [ 152.227767][ T5896] usb 7-1: SerialNumber: syz [ 152.321428][ T6595] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 152.328391][ T6595] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 152.337560][ T6595] vhci_hcd vhci_hcd.0: Device attached [ 152.350041][ T6596] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 152.689798][ T5988] vhci_hcd: vhci_device speed not set [ 152.700667][ T5897] vhci_hcd: stop threads [ 152.887405][ T6598] 8021q: adding VLAN 0 to HW filter on device bond1 [ 153.022087][ T5897] vhci_hcd: release socket [ 153.065512][ T5897] vhci_hcd: disconnect device [ 153.070600][ T5896] usb 7-1: 0:2 : does not exist [ 153.135393][ T5988] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 153.177947][ T5988] usb 43-1: enqueue for inactive port 0 [ 153.288975][ T5988] vhci_hcd: vhci_device speed not set [ 153.364528][ T5101] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 154.357551][ T5896] usb 7-1: USB disconnect, device number 2 [ 154.759991][ T5793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.144884][ T6628] netlink: 32 bytes leftover after parsing attributes in process `syz.4.126'. [ 155.980632][ T6648] loop6: detected capacity change from 0 to 1024 [ 156.201683][ T3469] hfsplus: b-tree write err: -5, ino 4 [ 158.028942][ T6673] loop4: detected capacity change from 0 to 128 [ 158.051773][ T6673] gfs2: gfs2 mount does not exist [ 158.282752][ T6633] loop3: detected capacity change from 0 to 32768 [ 158.435861][ T6633] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 158.551653][ T6633] workqueue: Failed to create a rescuer kthread for wq "xfs-cil/loop3": -EINTR [ 158.567107][ T6633] XFS (loop3): log mount failed [ 158.587664][ T6687] netlink: 32 bytes leftover after parsing attributes in process `syz.4.139'. [ 159.014305][ T27] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 159.216910][ T27] usb 6-1: Using ep0 maxpacket: 16 [ 159.238985][ T27] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 159.271219][ T27] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.310212][ T27] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 159.357505][ T27] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 159.394950][ T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.420266][ T27] usb 6-1: Product: syz [ 159.422350][ T6700] loop3: detected capacity change from 0 to 1024 [ 159.431126][ T27] usb 6-1: Manufacturer: syz [ 159.464245][ T27] usb 6-1: SerialNumber: syz [ 159.719208][ T991] hfsplus: b-tree write err: -5, ino 4 [ 159.911392][ T27] usb 6-1: 0:2 : does not exist [ 161.739367][ T27] usb 6-1: USB disconnect, device number 2 [ 161.807905][ T6006] udevd[6006]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 161.971795][ T6728] loop3: detected capacity change from 0 to 128 [ 162.014966][ T6728] gfs2: gfs2 mount does not exist [ 163.373538][ T6726] syzkaller0: entered promiscuous mode [ 164.318469][ T6760] netlink: 32 bytes leftover after parsing attributes in process `syz.5.153'. [ 168.754434][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 168.964889][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 168.995760][ T9] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 169.034254][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.095040][ T9] usb 6-1: config 0 descriptor?? [ 169.129823][ T9] gspca_main: sunplus-2.14.0 probing 041e:400b [ 170.775321][ T9] gspca_sunplus: reg_w_riv err -71 [ 170.940596][ T9] sunplus: probe of 6-1:0.0 failed with error -71 [ 171.238992][ T9] usb 6-1: USB disconnect, device number 3 [ 171.835280][ T6823] loop3: detected capacity change from 0 to 128 [ 171.842881][ T6823] gfs2: gfs2 mount does not exist [ 173.463158][ T6833] netlink: 32 bytes leftover after parsing attributes in process `syz.5.168'. [ 176.947185][ T6872] netlink: 32 bytes leftover after parsing attributes in process `syz.6.180'. [ 179.503173][ T6914] tmpfs: Unknown parameter 'usrquota)p' [ 179.585742][ T6910] block nbd0: server does not support multiple connections per device. [ 179.627380][ T6910] block nbd0: shutting down sockets [ 181.623568][ T6942] loop3: detected capacity change from 0 to 128 [ 181.700052][ T6942] gfs2: gfs2 mount does not exist [ 182.370911][ T6954] loop5: detected capacity change from 0 to 1024 [ 183.473416][ T1127] hfsplus: b-tree write err: -5, ino 4 [ 184.949789][ T6997] loop3: detected capacity change from 0 to 1024 [ 185.937186][ T58] hfsplus: b-tree write err: -5, ino 4 [ 187.599994][ T7030] loop3: detected capacity change from 0 to 128 [ 187.623425][ T7030] gfs2: gfs2 mount does not exist [ 187.688995][ T6006] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 188.326667][ T7045] loop4: detected capacity change from 0 to 8 [ 188.397582][ T7045] SQUASHFS error: Unable to read inode 0x6 [ 188.406418][ T5101] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 188.415331][ T5101] Bluetooth: hci2: Injecting HCI hardware error event [ 188.424735][ T5101] Bluetooth: hci2: hardware error 0x00 [ 189.427670][ T7053] loop4: detected capacity change from 0 to 256 [ 189.434978][ T7053] exfat: Deprecated parameter 'utf8' [ 189.968475][ T7045] sched: RT throttling activated [ 190.577512][ T5101] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 190.654758][ T7053] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x40a90196, utbl_chksum : 0xe619d30d) [ 192.286861][ T7079] loop4: detected capacity change from 0 to 128 [ 192.314715][ T7079] gfs2: gfs2 mount does not exist [ 194.577181][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.583629][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.087414][ T7132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.238'. [ 196.125419][ T7132] netlink: 28 bytes leftover after parsing attributes in process `syz.3.238'. [ 196.601594][ T7132] geneve2: entered promiscuous mode [ 196.607198][ T7132] geneve2: entered allmulticast mode [ 197.095866][ T7132] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.238'. [ 198.591238][ T7170] loop4: detected capacity change from 0 to 128 [ 198.612313][ T7170] gfs2: gfs2 mount does not exist [ 201.493483][ T7208] fuse: Unknown parameter '0x000000000000000a' [ 202.147998][ T7203] loop5: detected capacity change from 0 to 32768 [ 202.159796][ T7203] XFS: ikeep mount option is deprecated. [ 202.218377][ T7203] XFS: ikeep mount option is deprecated. [ 202.236320][ T7203] XFS: noikeep mount option is deprecated. [ 202.283864][ T7203] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 202.481424][ T7228] Bluetooth: MGMT ver 1.22 [ 202.486843][ T7228] Bluetooth: hci0: load_link_keys: too big key_count value 2816 [ 202.591780][ T7203] XFS (loop5): Ending clean mount [ 202.950711][ T6055] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 205.036885][ T7257] loop6: detected capacity change from 0 to 128 [ 205.056746][ T7257] gfs2: gfs2 mount does not exist [ 207.189380][ T7286] ip6tnl0: entered promiscuous mode [ 207.218366][ T7286] netlink: 4 bytes leftover after parsing attributes in process `syz.5.260'. [ 207.249655][ T7286] bridge_slave_1: left allmulticast mode [ 207.268531][ T7286] bridge_slave_1: left promiscuous mode [ 207.299217][ T7286] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.420528][ T7286] bridge_slave_0: left allmulticast mode [ 207.468168][ T7286] bridge_slave_0: left promiscuous mode [ 207.489547][ T7286] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.864882][ T7284] ip6tnl0: left promiscuous mode [ 219.226740][ T7375] loop5: detected capacity change from 0 to 32768 [ 221.297901][ T7418] loop3: detected capacity change from 0 to 4096 [ 221.315184][ T7418] ntfs3: Unknown parameter '184467440737095516150000000000000000000000000000000000000000000' [ 221.532280][ T7418] ptrace attach of "./syz-executor exec"[5793] was attempted by " x\x09\x0d\x07>Gvn}Iٷll!qIdlI$$(.\x09I$i2۽_{s3=gf83ˆ6(!!!,IvD%+wK221`=kǙ?dY\x0d$n٢Ƿgڞˋ;wХoB^&ի_v;$ҷ[;!KϾszжg{CݧC߾\x09m{JaPB^\x09\x0cJh۩m\x09\x0aJ0TP; ǥKC\x09 Kլ]0R3!\x09Cfr16!Mp)sPk/%-1\x0bt?PZWBaBH鳤Vp!B0N\x09Ň)DRT#ד3BF.ƇRF\x5c:t/%aEpW<\x0a~0r0tҥ=E+3 [ 225.201546][ T7438] syzkaller0: entered promiscuous mode [ 225.338180][ T7438] syzkaller0: entered allmulticast mode [ 227.624901][ T7450] netlink: 8 bytes leftover after parsing attributes in process `syz.6.293'. [ 227.633729][ T7450] netlink: 12 bytes leftover after parsing attributes in process `syz.6.293'. [ 227.650887][ T7450] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.660490][ T7450] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.669696][ T7450] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.678742][ T7450] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.732525][ T7450] netlink: 8 bytes leftover after parsing attributes in process `syz.6.293'. [ 227.773693][ T7450] netlink: 12 bytes leftover after parsing attributes in process `syz.6.293'. [ 227.893619][ T7459] autofs4:pid:7459:autofs_fill_super: called with bogus options [ 228.560731][ T7467] loop6: detected capacity change from 0 to 4096 [ 228.708040][ T7469] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 228.891844][ T28] audit: type=1800 audit(1755879033.713:3): pid=7467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.298" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 230.856596][ T7498] loop6: detected capacity change from 0 to 64 [ 232.018615][ T28] audit: type=1800 audit(1755879036.843:4): pid=7500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.303" name="file1" dev="loop6" ino=22 res=0 errno=0 [ 232.305561][ T7498] hfs: request for non-existent node 131072 in B*Tree [ 232.390512][ T7498] hfs: request for non-existent node 131072 in B*Tree [ 232.484243][ T5792] Bluetooth: hci3: command 0x0406 tx timeout [ 233.873997][ T7509] autofs4:pid:7509:autofs_fill_super: called with bogus options [ 237.301630][ T7548] netlink: 32 bytes leftover after parsing attributes in process `syz.6.313'. [ 237.804653][ T5988] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 238.008914][ T5988] usb 4-1: config 0 has an invalid interface number: 247 but max is 0 [ 238.044316][ T5988] usb 4-1: config 0 has no interface number 0 [ 238.074625][ T5988] usb 4-1: too many endpoints for config 0 interface 247 altsetting 138: 111, using maximum allowed: 30 [ 238.114247][ T5988] usb 4-1: config 0 interface 247 altsetting 138 has 0 endpoint descriptors, different from the interface descriptor's value: 111 [ 238.168330][ T5988] usb 4-1: config 0 interface 247 has no altsetting 0 [ 238.197834][ T5988] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 238.220299][ T7559] Bluetooth: hci0: load_link_keys: too big key_count value 2816 [ 238.247976][ T5988] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.290781][ T5988] usb 4-1: config 0 descriptor?? [ 238.726024][ T7567] xt_TPROXY: Can be used only with -p tcp or -p udp [ 238.767800][ T5988] usb 4-1: string descriptor 0 read error: -71 [ 239.529364][ T5988] usb 4-1: Cannot read MAC address [ 239.536449][ T5988] MOSCHIP usb-ethernet driver: probe of 4-1:0.247 failed with error -71 [ 239.558936][ T5988] usb 4-1: USB disconnect, device number 3 [ 239.689090][ T7571] autofs4:pid:7571:autofs_fill_super: called with bogus options [ 242.844433][ T5855] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 243.050105][ T7599] netlink: 32 bytes leftover after parsing attributes in process `syz.6.324'. [ 243.138700][ T5855] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 243.326521][ T5855] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 243.455201][ T5855] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.534282][ T5855] usb 6-1: Product: syz [ 243.542158][ T5855] usb 6-1: Manufacturer: syz [ 243.559363][ T5855] usb 6-1: SerialNumber: syz [ 243.600196][ T5855] usb 6-1: config 0 descriptor?? [ 244.838372][ T5855] usb 6-1: USB disconnect, device number 4 [ 245.285891][ T5803] udevd[5803]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 245.290131][ T7604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.325'. [ 245.311769][ T7604] netlink: 20 bytes leftover after parsing attributes in process `syz.4.325'. [ 245.327322][ T7604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.325'. [ 245.336196][ T7604] netlink: 20 bytes leftover after parsing attributes in process `syz.4.325'. [ 245.354603][ T7616] autofs4:pid:7616:autofs_fill_super: called with bogus options [ 247.051064][ T7619] loop3: detected capacity change from 0 to 262144 [ 247.075578][ T7619] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop3 scanned by syz.3.329 (7619) [ 247.121290][ T7619] BTRFS info (device loop3): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 247.132279][ T7619] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 247.143068][ T7619] BTRFS info (device loop3): enabling ssd optimizations [ 247.150126][ T7619] BTRFS info (device loop3): using spread ssd allocation scheme [ 247.157961][ T7619] BTRFS info (device loop3): using free space tree [ 247.368782][ T7619] BTRFS info (device loop3): auto enabling async discard [ 247.993513][ T28] audit: type=1800 audit(1755879052.733:5): pid=7619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.329" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 248.781792][ T7662] netlink: 32 bytes leftover after parsing attributes in process `syz.5.334'. [ 249.199425][ T5793] BTRFS info (device loop3): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 251.837875][ T7685] autofs4:pid:7685:autofs_fill_super: called with bogus options [ 252.204588][ T5882] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 252.241308][ T7695] loop5: detected capacity change from 0 to 2048 [ 252.468448][ T7695] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 253.055398][ T7698] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 253.079536][ T6006] udevd[6006]: incorrect nilfs2 checksum on /dev/loop5 [ 253.123946][ T7695] NILFS error (device loop5): __nilfs_read_inode: invalid file type bits in mode 0177777 for inode 12 [ 253.197848][ T7695] Remounting filesystem read-only [ 253.197998][ T5882] usb 4-1: config 0 has an invalid interface number: 247 but max is 0 [ 253.264374][ T5882] usb 4-1: config 0 has no interface number 0 [ 253.293468][ T5882] usb 4-1: too many endpoints for config 0 interface 247 altsetting 138: 111, using maximum allowed: 30 [ 253.330623][ T5882] usb 4-1: config 0 interface 247 altsetting 138 has 0 endpoint descriptors, different from the interface descriptor's value: 111 [ 253.474440][ T7703] netlink: 32 bytes leftover after parsing attributes in process `syz.6.344'. [ 253.581300][ T5882] usb 4-1: config 0 interface 247 has no altsetting 0 [ 253.930134][ T5882] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 254.008220][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.071791][ T5882] usb 4-1: config 0 descriptor?? [ 254.585465][ T5882] usb 4-1: string descriptor 0 read error: -71 [ 254.600243][ T7724] Bluetooth: hci0: load_link_keys: too big key_count value 2816 [ 254.619280][ T5882] usb 4-1: Cannot read MAC address [ 254.777075][ T5882] MOSCHIP usb-ethernet driver: probe of 4-1:0.247 failed with error -71 [ 255.224471][ T5882] usb 4-1: USB disconnect, device number 4 [ 255.920714][ T7733] autofs4:pid:7733:autofs_fill_super: called with bogus options [ 256.015668][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.022103][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.260528][ T7745] syzkaller0: entered promiscuous mode [ 257.356015][ T7745] syzkaller0: entered allmulticast mode [ 257.573480][ T7757] netlink: 32 bytes leftover after parsing attributes in process `syz.6.355'. [ 258.626246][ T5882] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 258.851506][ T5882] usb 4-1: config 0 has an invalid interface number: 247 but max is 0 [ 258.860754][ T5882] usb 4-1: config 0 has no interface number 0 [ 258.867077][ T5882] usb 4-1: too many endpoints for config 0 interface 247 altsetting 138: 111, using maximum allowed: 30 [ 258.895305][ T5882] usb 4-1: config 0 interface 247 altsetting 138 has 0 endpoint descriptors, different from the interface descriptor's value: 111 [ 258.909391][ T5882] usb 4-1: config 0 interface 247 has no altsetting 0 [ 258.917576][ T5882] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 258.927132][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.940396][ T5882] usb 4-1: config 0 descriptor?? [ 259.384913][ T5882] usb 4-1: string descriptor 0 read error: -71 [ 259.416288][ T5882] usb 4-1: Cannot read MAC address [ 259.421610][ T5882] MOSCHIP usb-ethernet driver: probe of 4-1:0.247 failed with error -71 [ 259.454819][ T5882] usb 4-1: USB disconnect, device number 5 [ 261.226645][ T7780] autofs4:pid:7780:autofs_fill_super: called with bogus options [ 262.296034][ T6812] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 264.456701][ T7793] Bluetooth: hci0: load_link_keys: too big key_count value 2816 [ 264.758416][ T6812] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 265.284395][ T6812] usb 7-1: config 0 has no interface number 0 [ 265.290578][ T6812] usb 7-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 265.301362][ T6812] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 265.312185][ T6812] usb 7-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 265.323089][ T6812] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 265.337869][ T6812] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 265.347017][ T6812] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.390737][ T6812] usb 7-1: config 0 descriptor?? [ 265.409541][ T6812] usb 7-1: can't set config #0, error -71 [ 265.496834][ T6812] usb 7-1: USB disconnect, device number 3 [ 266.346651][ T7813] autofs4:pid:7813:autofs_fill_super: called with bogus options [ 267.657751][ T7821] xt_TPROXY: Can be used only with -p tcp or -p udp [ 269.406565][ T7824] syzkaller0: entered promiscuous mode [ 269.445649][ T7824] syzkaller0: entered allmulticast mode [ 269.589053][ T7839] loop4: detected capacity change from 0 to 8 [ 269.642000][ T7839] SQUASHFS error: Unable to read inode 0x6 [ 270.113623][ T7849] loop4: detected capacity change from 0 to 256 [ 270.120803][ T7849] exfat: Deprecated parameter 'utf8' [ 270.185419][ T7849] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x40a90196, utbl_chksum : 0xe619d30d) [ 273.746990][ T7861] Bluetooth: hci0: load_link_keys: too big key_count value 2816 [ 274.292086][ T7865] autofs4:pid:7865:autofs_fill_super: called with bogus options [ 274.494342][ T7873] xt_TPROXY: Can be used only with -p tcp or -p udp [ 277.542035][ T7880] loop3: detected capacity change from 0 to 128 [ 277.572264][ T7880] gfs2: gfs2 mount does not exist [ 280.272973][ T7898] syzkaller0: entered promiscuous mode [ 280.342426][ T7898] syzkaller0: entered allmulticast mode [ 281.219493][ T7914] xt_TPROXY: Can be used only with -p tcp or -p udp [ 281.961254][ T7920] autofs4:pid:7920:autofs_fill_super: called with bogus options [ 282.062993][ T7922] Bluetooth: hci0: load_link_keys: too big key_count value 2816 [ 291.688307][ T7980] autofs4:pid:7980:autofs_fill_super: called with bogus options [ 291.960847][ T7984] capability: warning: `syz.6.405' uses deprecated v2 capabilities in a way that may be insecure [ 293.491303][ T7997] syzkaller0: entered promiscuous mode [ 293.504521][ T7997] syzkaller0: entered allmulticast mode [ 297.206584][ T8017] loop6: detected capacity change from 0 to 8 [ 297.214954][ T8017] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 297.227391][ T8017] cramfs: wrong magic [ 298.780340][ T8030] autofs4:pid:8030:autofs_fill_super: called with bogus options [ 298.888477][ T8032] loop3: detected capacity change from 0 to 8 [ 298.945588][ T8032] SQUASHFS error: Unable to read inode 0x6 [ 299.455548][ T8034] loop3: detected capacity change from 0 to 256 [ 299.462748][ T8034] exfat: Deprecated parameter 'utf8' [ 301.100962][ T8034] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x40a90196, utbl_chksum : 0xe619d30d) [ 306.596431][ T8066] Bluetooth: hci0: load_link_keys: too big key_count value 2816 [ 308.914899][ T8089] autofs4:pid:8089:autofs_fill_super: called with bogus options [ 309.204355][ T27] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 309.404316][ T27] usb 5-1: Using ep0 maxpacket: 32 [ 309.424194][ T27] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 309.433499][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.517258][ T27] usb 5-1: config 0 descriptor?? [ 309.556758][ T27] gspca_main: sunplus-2.14.0 probing 041e:400b [ 309.596727][ T8091] Bluetooth: hci0: load_link_keys: too big key_count value 2816 [ 310.932586][ T8109] syzkaller0: entered promiscuous mode [ 310.942462][ T8109] syzkaller0: entered allmulticast mode [ 311.379389][ T27] gspca_sunplus: reg_w_riv err -71 [ 311.540605][ T27] sunplus: probe of 5-1:0.0 failed with error -71 [ 311.551069][ T27] usb 5-1: USB disconnect, device number 2 [ 312.057635][ T8125] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 312.064238][ T8125] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 312.087221][ T8125] vhci_hcd vhci_hcd.0: Device attached [ 312.095327][ T8125] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 312.118582][ T8125] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(13) [ 312.125245][ T8125] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 312.133559][ T8125] vhci_hcd vhci_hcd.0: Device attached [ 312.142503][ T8125] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(15) [ 312.149163][ T8125] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 312.157789][ T8125] vhci_hcd vhci_hcd.0: Device attached [ 312.252773][ T8125] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(17) [ 312.259438][ T8125] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 312.298294][ T8125] vhci_hcd vhci_hcd.0: Device attached [ 312.337652][ T8125] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 312.365941][ T8125] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 312.428678][ T27] usb 43-1: new low-speed USB device number 3 using vhci_hcd [ 312.441664][ T8132] vhci_hcd: connection closed [ 312.446538][ T48] vhci_hcd: stop threads [ 312.450603][ T8130] vhci_hcd: connection closed [ 312.452598][ T48] vhci_hcd: release socket [ 312.464153][ T8126] vhci_hcd: connection reset by peer [ 312.471979][ T8134] vhci_hcd: connection closed [ 312.472360][ T48] vhci_hcd: disconnect device [ 312.491989][ T48] vhci_hcd: stop threads [ 312.521342][ T48] vhci_hcd: release socket [ 312.550325][ T48] vhci_hcd: disconnect device [ 312.560741][ T8142] autofs4:pid:8142:autofs_fill_super: called with bogus options [ 312.575228][ T48] vhci_hcd: stop threads [ 312.579533][ T48] vhci_hcd: release socket [ 312.585791][ T48] vhci_hcd: disconnect device [ 312.601107][ T48] vhci_hcd: stop threads [ 312.607222][ T48] vhci_hcd: release socket [ 312.611859][ T48] vhci_hcd: disconnect device [ 315.614437][ T5855] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 315.817358][ T5855] usb 4-1: Using ep0 maxpacket: 32 [ 315.837143][ T5855] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 315.846322][ T5855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.868591][ T5855] usb 4-1: config 0 descriptor?? [ 315.888969][ T5855] gspca_main: sunplus-2.14.0 probing 041e:400b [ 317.345156][ T5855] gspca_sunplus: reg_w_riv err -71 [ 317.351633][ T5855] sunplus: probe of 4-1:0.0 failed with error -71 [ 317.392549][ T5855] usb 4-1: USB disconnect, device number 6 [ 317.451025][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.692258][ T27] vhci_hcd: vhci_device speed not set [ 318.263201][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.023658][ T8206] syzkaller0: entered promiscuous mode [ 321.048905][ T8206] syzkaller0: entered allmulticast mode [ 321.207043][ T8215] Bluetooth: hci0: load_link_keys: too big key_count value 2816 [ 321.454775][ T8162] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 321.666322][ T27] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 321.714271][ T8162] usb 5-1: Using ep0 maxpacket: 16 [ 321.723508][ T8162] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 321.732621][ T8162] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 321.747430][ T8162] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 321.765692][ T8162] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 321.790578][ T8162] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.799947][ T8162] usb 5-1: Product: syz [ 321.812017][ T8162] usb 5-1: Manufacturer: syz [ 321.816829][ T8162] usb 5-1: SerialNumber: syz [ 321.874470][ T27] usb 7-1: Using ep0 maxpacket: 32 [ 321.882411][ T27] usb 7-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 321.909139][ T27] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.929184][ T27] usb 7-1: config 0 descriptor?? [ 321.943850][ T27] gspca_main: sunplus-2.14.0 probing 041e:400b [ 322.256731][ T8162] usb 5-1: 0:2 : does not exist [ 322.269593][ T8162] usb 5-1: 1:0: cannot get min/max values for control 4 (id 1) [ 322.312663][ T8162] usb 5-1: USB disconnect, device number 3 [ 322.395098][ T8063] udevd[8063]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 323.382693][ T27] gspca_sunplus: reg_w_riv err -71 [ 323.388135][ T27] sunplus: probe of 7-1:0.0 failed with error -71 [ 323.428983][ T27] usb 7-1: USB disconnect, device number 4 [ 324.478222][ T8245] loop6: detected capacity change from 0 to 1024 [ 325.364376][ T8245] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 325.395634][ T8245] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e11d, mo2=0002] [ 325.404577][ T8245] System zones: 0-1, 2-3, 4-36, 98-101, 102-102 [ 325.412869][ T8245] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 325.795924][ T6060] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.824688][ T8259] loop6: detected capacity change from 0 to 128 [ 328.304623][ T8271] Bluetooth: hci0: load_link_keys: too big key_count value 2816 [ 328.635841][ T8277] netlink: 8 bytes leftover after parsing attributes in process `syz.6.469'. [ 328.645690][ T8277] netlink: 20 bytes leftover after parsing attributes in process `syz.6.469'. [ 328.847856][ T8277] netlink: 8 bytes leftover after parsing attributes in process `syz.6.469'. [ 328.861553][ T8277] netlink: 20 bytes leftover after parsing attributes in process `syz.6.469'. [ 334.322297][ T8343] Bluetooth: hci0: load_link_keys: too big key_count value 2816 [ 335.278648][ T8352] loop3: detected capacity change from 0 to 128 [ 335.310875][ T8352] gfs2: gfs2 mount does not exist [ 335.384509][ T8063] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 337.894464][ T5116] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 338.811506][ T5116] usb 5-1: config 0 has an invalid interface number: 247 but max is 0 [ 338.820566][ T5116] usb 5-1: config 0 has no interface number 0 [ 338.827432][ T5116] usb 5-1: too many endpoints for config 0 interface 247 altsetting 138: 111, using maximum allowed: 30 [ 338.838847][ T5116] usb 5-1: config 0 interface 247 altsetting 138 has 0 endpoint descriptors, different from the interface descriptor's value: 111 [ 338.858127][ T5116] usb 5-1: config 0 interface 247 has no altsetting 0 [ 338.889051][ T5116] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 338.909006][ T5116] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.920082][ T5116] usb 5-1: config 0 descriptor?? [ 339.625238][ T5116] usb 5-1: Cannot read MAC address [ 339.633025][ T5116] MOSCHIP usb-ethernet driver: probe of 5-1:0.247 failed with error -71 [ 339.679738][ T5116] usb 5-1: USB disconnect, device number 4 [ 341.195053][ T8409] Bluetooth: hci0: load_link_keys: too big key_count value 2816 [ 344.126684][ T8442] loop3: detected capacity change from 0 to 8 [ 344.984853][ T8442] SQUASHFS error: Unable to read inode 0x6 [ 347.667295][ T8466] loop3: detected capacity change from 0 to 256 [ 347.674302][ T8466] exfat: Deprecated parameter 'utf8' [ 348.548843][ T8466] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x40a90196, utbl_chksum : 0xe619d30d) [ 349.491390][ T8477] Bluetooth: hci0: load_link_keys: too big key_count value 2816 [ 352.847505][ T8526] loop6: detected capacity change from 0 to 1024 [ 353.414518][ T5828] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 353.606331][ T5828] usb 5-1: Using ep0 maxpacket: 32 [ 353.622286][ T5828] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 353.655560][ T5828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.700661][ T5828] usb 5-1: config 0 descriptor?? [ 353.732482][ T5828] gspca_main: sunplus-2.14.0 probing 041e:400b [ 355.225172][ T5828] gspca_sunplus: reg_w_riv err -71 [ 355.775088][ T5828] sunplus: probe of 5-1:0.0 failed with error -71 [ 355.831967][ T5828] usb 5-1: USB disconnect, device number 5 [ 356.626195][ T5828] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 356.766844][ T8570] Bluetooth: hci0: load_link_keys: too big key_count value 2816 [ 356.888321][ T5828] usb 4-1: config 0 has an invalid interface number: 247 but max is 0 [ 356.916022][ T5828] usb 4-1: config 0 has no interface number 0 [ 356.937063][ T5828] usb 4-1: too many endpoints for config 0 interface 247 altsetting 138: 111, using maximum allowed: 30 [ 356.972191][ T5828] usb 4-1: config 0 interface 247 altsetting 138 has 0 endpoint descriptors, different from the interface descriptor's value: 111 [ 356.994508][ T8585] fuse: Bad value for 'fd' [ 357.015682][ T5828] usb 4-1: config 0 interface 247 has no altsetting 0 [ 357.037307][ T5828] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 357.068327][ T5828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.090051][ T5828] usb 4-1: config 0 descriptor?? [ 357.206246][ T5897] hfsplus: b-tree write err: -5, ino 4 [ 357.534459][ T5828] usb 4-1: Cannot read MAC address [ 357.551281][ T5828] MOSCHIP usb-ethernet driver: probe of 4-1:0.247 failed with error -71 [ 357.582859][ T5828] usb 4-1: USB disconnect, device number 7 [ 360.387717][ T8610] loop5: detected capacity change from 0 to 128 [ 360.396064][ T8610] gfs2: gfs2 mount does not exist [ 360.536743][ T8063] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 362.002532][ T8623] fuse: Bad value for 'fd' [ 362.033115][ T8625] loop4: detected capacity change from 0 to 1024 [ 362.533517][ T8636] ptrace attach of "./syz-executor exec"[6055] was attempted by "./syz-executor exec"[8636] [ 365.373549][ T8639] Bluetooth: hci0: load_link_keys: too big key_count value 2816 [ 365.908343][ T1127] hfsplus: b-tree write err: -5, ino 4 [ 366.872530][ T8662] loop4: detected capacity change from 0 to 128 [ 367.808396][ T8667] loop6: detected capacity change from 0 to 128 [ 367.840695][ T8669] loop5: detected capacity change from 0 to 1024 [ 367.853986][ T8667] gfs2: gfs2 mount does not exist [ 367.865354][ T8669] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 368.516143][ T8669] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 368.658895][ T8678] ptrace attach of "./syz-executor exec"[6013] was attempted by "./syz-executor exec"[8678] [ 368.968435][ T8686] loop3: detected capacity change from 0 to 1024 [ 369.902978][ T6055] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.104190][ T785] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 372.112096][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 372.264583][ T785] usb 5-1: device descriptor read/64, error -32 [ 373.021466][ T785] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 373.030448][ T8702] Bluetooth: hci0: load_link_keys: too big key_count value 2816 [ 373.042360][ T7433] hfsplus: b-tree write err: -5, ino 4 [ 373.160921][ T8725] loop3: detected capacity change from 0 to 128 [ 373.169007][ T8725] gfs2: gfs2 mount does not exist [ 373.418394][ T785] usb 5-1: config 0 has an invalid interface number: 247 but max is 0 [ 373.656840][ T785] usb 5-1: config 0 has no interface number 0 [ 373.722534][ T785] usb 5-1: too many endpoints for config 0 interface 247 altsetting 138: 111, using maximum allowed: 30 [ 373.771157][ T785] usb 5-1: config 0 interface 247 altsetting 138 has 0 endpoint descriptors, different from the interface descriptor's value: 111 [ 373.791257][ T785] usb 5-1: config 0 interface 247 has no altsetting 0 [ 373.809248][ T785] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 373.829011][ T785] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.848730][ T785] usb 5-1: config 0 descriptor?? [ 374.323447][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 374.331131][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 374.340082][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 374.349467][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 374.408340][ T8735] loop3: detected capacity change from 0 to 1024 [ 374.424370][ T785] usb 5-1: Cannot read MAC address [ 374.429729][ T785] MOSCHIP usb-ethernet driver: probe of 5-1:0.247 failed with error -71 [ 374.464345][ T8735] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 374.495061][ T785] usb 5-1: USB disconnect, device number 7 [ 374.578558][ T8735] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 374.995119][ T8731] loop5: detected capacity change from 0 to 32768 [ 375.410071][ T5793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.707654][ T8750] loop4: detected capacity change from 0 to 1024 [ 376.873159][ T8757] loop3: detected capacity change from 0 to 128 [ 376.905558][ T8757] gfs2: gfs2 mount does not exist [ 376.956637][ T8063] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 378.310843][ T8767] netlink: 8 bytes leftover after parsing attributes in process `syz.5.577'. [ 378.453950][ T8769] Bluetooth: hci0: load_link_keys: too big key_count value 2816 [ 378.644567][ T8767] netlink: 20 bytes leftover after parsing attributes in process `syz.5.577'. [ 378.868029][ T7433] hfsplus: b-tree write err: -5, ino 4 [ 378.900101][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.910594][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.152985][ T8774] loop4: detected capacity change from 0 to 1024 [ 379.191553][ T8774] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 379.273733][ T8774] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.674326][ T27] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 379.867708][ T27] usb 6-1: config 0 has an invalid interface number: 247 but max is 0 [ 379.877535][ T27] usb 6-1: config 0 has no interface number 0 [ 379.883902][ T27] usb 6-1: too many endpoints for config 0 interface 247 altsetting 138: 111, using maximum allowed: 30 [ 379.895863][ T27] usb 6-1: config 0 interface 247 altsetting 138 has 0 endpoint descriptors, different from the interface descriptor's value: 111 [ 379.988193][ T27] usb 6-1: config 0 interface 247 has no altsetting 0 [ 379.995398][ T27] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 380.010480][ T6013] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.017957][ T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.111399][ T27] usb 6-1: config 0 descriptor?? [ 380.311351][ T8793] loop4: detected capacity change from 0 to 128 [ 380.324923][ T8793] gfs2: gfs2 mount does not exist [ 380.677238][ T27] usb 6-1: Cannot read MAC address [ 380.685514][ T27] MOSCHIP usb-ethernet driver: probe of 6-1:0.247 failed with error -71 [ 380.919314][ T27] usb 6-1: USB disconnect, device number 5 [ 381.192370][ T8802] loop3: detected capacity change from 0 to 1024 [ 384.026870][ T8821] loop5: detected capacity change from 0 to 128 [ 384.081218][ T8821] gfs2: gfs2 mount does not exist [ 384.289349][ T8814] loop6: detected capacity change from 0 to 32768 [ 385.938913][ T7433] hfsplus: b-tree write err: -5, ino 4 [ 389.253213][ T8860] loop3: detected capacity change from 0 to 128 [ 389.265013][ T8858] loop4: detected capacity change from 0 to 1024 [ 389.282072][ T8860] gfs2: gfs2 mount does not exist [ 389.334588][ T8858] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 389.902551][ T8858] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.525244][ T6013] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.618047][ T8871] loop4: detected capacity change from 0 to 8 [ 390.626654][ T8871] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 390.649991][ T8871] cramfs: wrong magic [ 390.697396][ T8063] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 392.616618][ T8878] Bluetooth: hci0: load_link_keys: too big key_count value 2816 [ 392.958273][ T58] Bluetooth: hci4: Frame reassembly failed (-84) [ 393.563871][ T8893] loop3: detected capacity change from 0 to 128 [ 393.574653][ T8893] gfs2: gfs2 mount does not exist [ 393.627775][ T8063] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 394.461095][ T8902] loop6: detected capacity change from 0 to 1024 [ 394.490902][ T8902] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 394.536935][ T8902] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.964226][ T5101] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 395.481097][ T6060] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.535187][ T8927] loop4: detected capacity change from 0 to 4096 [ 396.580076][ T8927] ntfs3: Unknown parameter '184467440737095516150000000000000000000000000000000000000000000' [ 396.673646][ T8927] ptrace attach of "./syz-executor exec"[6013] was attempted by " x\x09\x0d\x07>Gvn}Iٷll!qIdlI$$(.\x09I$i2۽_{s3=gf83ˆ6(!!!,IvD%+wK221`=kǙ?dY\x0d$n٢Ƿgڞˋ;wХoB^&ի_v;$ҷ[;!KϾszжg{CݧC߾\x09m{JaPB^\x09\x0cJh۩m\x09\x0aJ0TP; ǥKC\x09 Kլ]0R3!\x09Cfr16!Mp)sPk/%-1\x0bt?PZWBaBH鳤Vp!B0N\x09Ň)DRT#ד3BF.ƇRF\x5c:t/%aEpW<\x0a~0r0tҥ=E+3 [ 397.331818][ T8933] loop4: detected capacity change from 0 to 128 [ 397.468821][ T8933] gfs2: gfs2 mount does not exist [ 398.277010][ T8943] loop6: detected capacity change from 0 to 1024 [ 398.303778][ T8943] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 398.465137][ T8943] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.510191][ T8946] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 398.516793][ T8946] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 398.524481][ T8946] vhci_hcd vhci_hcd.0: Device attached [ 399.359333][ T8951] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 399.426205][ T5897] vhci_hcd: stop threads [ 399.434318][ T8162] vhci_hcd: vhci_device speed not set [ 399.441377][ T5897] vhci_hcd: release socket [ 399.452432][ T5897] vhci_hcd: disconnect device [ 399.614411][ T8162] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 399.629504][ T8162] usb 41-1: enqueue for inactive port 0 [ 399.734504][ T8162] vhci_hcd: vhci_device speed not set [ 400.035947][ T6060] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.492015][ T8965] loop6: detected capacity change from 0 to 4096 [ 401.508680][ T8965] ntfs3: Unknown parameter '184467440737095516150000000000000000000000000000000000000000000' [ 401.571011][ T8965] ptrace attach of "./syz-executor exec"[6060] was attempted by " x\x09\x0d\x07>Gvn}Iٷll!qIdlI$$(.\x09I$i2۽_{s3=gf83ˆ6(!!!,IvD%+wK221`=kǙ?dY\x0d$n٢Ƿgڞˋ;wХoB^&ի_v;$ҷ[;!KϾszжg{CݧC߾\x09m{JaPB^\x09\x0cJh۩m\x09\x0aJ0TP; ǥKC\x09 Kլ]0R3!\x09Cfr16!Mp)sPk/%-1\x0bt?PZWBaBH鳤Vp!B0N\x09Ň)DRT#ד3BF.ƇRF\x5c:t/%aEpW<\x0a~0r0tҥ=E+3 [ 402.089771][ T8977] loop6: detected capacity change from 0 to 128 [ 404.334242][ T8999] can0: slcan on ttyprintk. [ 404.609354][ T8981] loop3: detected capacity change from 0 to 32768 [ 405.032681][ T8997] can0 (unregistered): slcan off ttyprintk. [ 408.464797][ T9052] loop6: detected capacity change from 0 to 128 [ 412.586586][ T9087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.662'. [ 412.595609][ T9087] netlink: 20 bytes leftover after parsing attributes in process `syz.4.662'. [ 412.609668][ T9087] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.619131][ T9087] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.627925][ T9087] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.636728][ T9087] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.647254][ T9087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.662'. [ 412.656085][ T9087] netlink: 20 bytes leftover after parsing attributes in process `syz.4.662'. [ 413.340674][ T9094] loop4: detected capacity change from 0 to 4096 [ 413.598644][ T9097] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 413.804349][ T9094] syz.4.664 (9094) used greatest stack depth: 19920 bytes left [ 414.730708][ T9108] loop4: detected capacity change from 0 to 4096 [ 414.785193][ T9109] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 414.954306][ T28] audit: type=1800 audit(1755879219.633:6): pid=9108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.669" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 415.233847][ T9111] loop5: detected capacity change from 0 to 4096 [ 415.448550][ T9111] ntfs3: loop5: ino=b, Correct links count -> 1. [ 415.485556][ T9111] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 415.658421][ T28] audit: type=1800 audit(1755879220.493:7): pid=9111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.670" name="file1" dev="loop5" ino=33 res=0 errno=0 [ 416.968916][ T9118] loop5: detected capacity change from 0 to 32768 [ 419.048802][ T9154] loop5: detected capacity change from 0 to 4096 [ 419.094902][ T9155] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 419.153929][ T9157] loop6: detected capacity change from 0 to 128 [ 419.171147][ T28] audit: type=1800 audit(1755879223.993:8): pid=9154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.680" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 419.216563][ T9157] gfs2: gfs2 mount does not exist [ 423.750345][ T9179] loop3: detected capacity change from 0 to 128 [ 423.835306][ T9172] loop5: detected capacity change from 0 to 32768 [ 423.838084][ T9179] gfs2: gfs2 mount does not exist [ 427.496962][ T9211] loop4: detected capacity change from 0 to 128 [ 427.527365][ T9211] gfs2: gfs2 mount does not exist [ 429.123854][ T9220] loop3: detected capacity change from 0 to 4096 [ 429.160818][ T9221] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 429.349694][ T9209] loop6: detected capacity change from 0 to 32768 [ 429.885933][ T9224] can0: slcan on ttyprintk. [ 429.907893][ T9225] loop3: detected capacity change from 0 to 1024 [ 430.865410][ T7433] hfsplus: b-tree write err: -5, ino 4 [ 430.937154][ T9222] can0 (unregistered): slcan off ttyprintk. [ 432.539225][ T9247] loop6: detected capacity change from 0 to 128 [ 432.580068][ T9247] gfs2: gfs2 mount does not exist [ 433.534999][ T9262] loop5: detected capacity change from 0 to 1024 [ 434.514893][ T5897] hfsplus: b-tree write err: -5, ino 4 [ 436.544174][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 436.633429][ T9268] loop4: detected capacity change from 0 to 32768 [ 436.754277][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 436.772629][ T9] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 436.796825][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 436.829936][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 436.860075][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 436.871614][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.891268][ T9] usb 4-1: Product: syz [ 436.914865][ T9] usb 4-1: Manufacturer: syz [ 436.930656][ T9] usb 4-1: SerialNumber: syz [ 437.495037][ T9] usb 4-1: 0:2 : does not exist [ 439.154161][ T9342] overlayfs: failed to resolve './bus': -2 [ 439.200391][ T5116] usb 4-1: USB disconnect, device number 8 [ 440.330194][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.336702][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.194898][ T9363] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 442.201488][ T9363] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 442.223637][ T9363] vhci_hcd vhci_hcd.0: Device attached [ 442.383220][ T9371] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 442.444516][ T9] vhci_hcd: vhci_device speed not set [ 442.762823][ T9] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 442.802368][ T9363] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 442.861848][ T9363] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 442.961632][ T9371] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 442.993114][ T9377] loop6: detected capacity change from 0 to 64 [ 443.086422][ T9363] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 443.126936][ T9371] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(18) [ 443.133891][ T9371] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 443.187313][ T9371] vhci_hcd vhci_hcd.0: Device attached [ 443.204607][ T9382] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 443.225224][ T9363] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 443.287423][ T9379] vhci_hcd: connection closed [ 443.291267][ T9364] vhci_hcd: connection reset by peer [ 443.304849][ T58] vhci_hcd: stop threads [ 443.309159][ T58] vhci_hcd: release socket [ 443.340782][ T58] vhci_hcd: disconnect device [ 443.364612][ T58] vhci_hcd: stop threads [ 443.381425][ T58] vhci_hcd: release socket [ 443.403589][ T58] vhci_hcd: disconnect device [ 443.695920][ T8162] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 443.786791][ T9392] loop6: detected capacity change from 0 to 512 [ 443.844532][ T9392] EXT4-fs: Ignoring removed nobh option [ 443.883501][ T9392] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 444.101647][ T8162] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 444.198929][ T8162] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.234281][ T8162] usb 5-1: Product: syz [ 444.280774][ T8162] usb 5-1: Manufacturer: syz [ 444.327590][ T9392] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.745: iget: bad i_size value: 38620345925642 [ 444.340195][ T8162] usb 5-1: SerialNumber: syz [ 444.362181][ T9392] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.745: couldn't read orphan inode 15 (err -117) [ 444.366211][ T8162] usb 5-1: config 0 descriptor?? [ 444.419912][ T9392] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.627075][ T8162] hso 5-1:0.0: Failed to find INT IN ep [ 444.646501][ T8162] usb-storage 5-1:0.0: USB Mass Storage device detected [ 444.958653][ T785] usb 5-1: USB disconnect, device number 8 [ 446.884164][ T9394] EXT4-fs error (device loop6): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 447.664453][ T9412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.749'. [ 447.699743][ T9412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.749'. [ 447.907619][ T9412] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.916477][ T9412] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.925283][ T9412] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.933981][ T9412] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.026859][ T9] vhci_hcd: vhci_device speed not set [ 448.174358][ T27] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 448.272992][ T9412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.749'. [ 448.284450][ T9412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.749'. [ 448.304778][ T11] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 28 with error 28 [ 448.322665][ T11] EXT4-fs (loop6): This should not happen!! Data will be lost [ 448.322665][ T11] [ 448.349221][ T11] EXT4-fs (loop6): Total free blocks count 0 [ 448.370399][ T11] EXT4-fs (loop6): Free/Dirty block details [ 448.382171][ T11] EXT4-fs (loop6): free_blocks=0 [ 448.388443][ T11] EXT4-fs (loop6): dirty_blocks=28 [ 448.404297][ T27] usb 6-1: device descriptor read/64, error -71 [ 448.415722][ T11] EXT4-fs (loop6): Block reservation details [ 448.421856][ T11] EXT4-fs (loop6): i_reserved_data_blocks=28 [ 448.470499][ T6060] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.834211][ T27] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 449.028041][ T27] usb 6-1: device descriptor read/64, error -71 [ 449.202205][ T27] usb usb6-port1: attempt power cycle [ 449.206860][ T9426] loop3: detected capacity change from 0 to 128 [ 451.404327][ T27] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 451.535665][ T27] usb 6-1: device descriptor read/8, error -71 [ 454.348400][ T9448] loop3: detected capacity change from 0 to 1024 [ 454.618201][ T9448] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 454.724390][ T9448] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 455.232242][ T9448] EXT4-fs error (device loop3): ext4_map_blocks:718: inode #15: block 3: comm syz.3.762: lblock 3 mapped to illegal pblock 3 (length 3) [ 455.262763][ T9448] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 455.361830][ T9448] EXT4-fs (loop3): This should not happen!! Data will be lost [ 455.361830][ T9448] [ 455.444254][ T9454] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 455.486957][ T9460] EXT4-fs error (device loop3): ext4_ext_remove_space:2929: inode #15: comm syz.3.762: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 455.849988][ T9460] EXT4-fs error (device loop3) in ext4_setattr:5645: Corrupt filesystem [ 455.958272][ T5793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 459.444271][ T8889] Bluetooth: hci3: command 0x0406 tx timeout [ 459.936611][ T9488] loop5: detected capacity change from 0 to 128 [ 462.023977][ T9498] netlink: 'syz.3.771': attribute type 10 has an invalid length. [ 462.321080][ T9498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.635020][ T9495] loop6: detected capacity change from 0 to 4096 [ 462.662162][ T9495] ntfs3: loop6: Different NTFS sector size (1024) and media sector size (512). [ 462.668575][ T9498] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 462.732602][ T9493] netlink: 28 bytes leftover after parsing attributes in process `syz.3.771'. [ 462.787233][ T9493] netlink: 32 bytes leftover after parsing attributes in process `syz.3.771'. [ 465.479184][ T9508] binder: 9507:9508 unknown command 1074553619 [ 465.490381][ T9508] binder: 9507:9508 ioctl c0306201 200000000040 returned -22 [ 465.547943][ T9508] binder: 9507:9508 ioctl 40044591 0 returned -22 [ 465.637532][ T9510] binder: 9507:9510 unknown command 1074553620 [ 465.643768][ T9510] binder: 9507:9510 ioctl c0306201 200000000640 returned -22 [ 470.112915][ T9534] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 470.407344][ T9538] 9pnet_fd: Insufficient options for proto=fd [ 472.067448][ T9545] loop4: detected capacity change from 0 to 512 [ 472.093570][ T9545] EXT4-fs: Ignoring removed nomblk_io_submit option [ 472.130921][ T9545] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 472.164925][ T9545] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 472.206620][ T9545] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #17: comm syz.4.787: inline data xattr refers to an external xattr inode [ 472.264925][ T9545] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.787: couldn't read orphan inode 17 (err -117) [ 472.360569][ T9552] ptrace attach of "./syz-executor exec"[5793] was attempted by ""[9552] [ 472.385489][ T9545] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 472.635153][ T6013] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.655421][ T9554] loop6: detected capacity change from 0 to 1024 [ 472.803000][ T9554] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 472.849574][ T9554] ext4 filesystem being mounted at /178/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 472.916881][ T9554] EXT4-fs error (device loop6): ext4_free_blocks:6681: comm syz.6.790: Freeing blocks not in datazone - block = 0, count = 16 [ 473.908507][ T6060] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 476.505315][ T9575] 9pnet_fd: Insufficient options for proto=fd [ 478.725866][ T9587] ptrace attach of "./syz-executor exec"[6060] was attempted by ""[9587] [ 479.565510][ T9597] overlayfs: missing 'lowerdir' [ 479.759954][ T9584] loop3: detected capacity change from 0 to 32768 [ 479.778770][ T9584] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.800 (9584) [ 479.819987][ T9584] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 479.874417][ T9584] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 479.883441][ T9584] BTRFS info (device loop3): force zlib compression, level 3 [ 479.891576][ T9584] BTRFS info (device loop3): enabling auto defrag [ 479.904191][ T9584] BTRFS info (device loop3): setting nodatasum [ 479.910587][ T9584] BTRFS info (device loop3): force clearing of disk cache [ 479.918404][ T9584] BTRFS info (device loop3): using free space tree [ 480.114439][ T9584] BTRFS info (device loop3): enabling ssd optimizations [ 480.152353][ T9584] BTRFS info (device loop3): rebuilding free space tree [ 480.509392][ T5793] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 480.869994][ T8063] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop3 scanned by udevd (8063) [ 484.773332][ T785] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 485.546481][ T785] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.702871][ T785] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 485.720030][ T785] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 485.734126][ T785] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.744598][ T9658] overlayfs: missing 'lowerdir' [ 485.758203][ T785] usb 5-1: config 0 descriptor?? [ 486.281456][ T9661] loop5: detected capacity change from 0 to 128 [ 487.370398][ T9649] loop3: detected capacity change from 0 to 32768 [ 487.386592][ T785] usb 5-1: USB disconnect, device number 9 [ 487.777269][ T9681] loop5: detected capacity change from 0 to 64 [ 490.694340][ T9681] hfs: unable to open extent tree [ 490.699488][ T9681] hfs: can't find a HFS filesystem on dev loop5 [ 491.616605][ T9699] overlayfs: missing 'lowerdir' [ 492.544890][ T9703] loop5: detected capacity change from 0 to 4096 [ 493.068277][ T9703] ntfs3: loop5: ino=b, Correct links count -> 1. [ 493.080562][ T9703] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 493.254959][ T9708] loop4: detected capacity change from 0 to 128 [ 493.440864][ T9712] loop3: detected capacity change from 0 to 64 [ 493.694239][ T27] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 495.431825][ T9730] 9pnet_fd: Insufficient options for proto=fd [ 496.714103][ T27] usb 6-1: device not accepting address 10, error -71 [ 497.719736][ T9741] fuse: Unknown parameter 'grou00000000000000000000' [ 498.560780][ T9749] loop6: detected capacity change from 0 to 64 [ 498.647353][ T9749] hfs: unable to locate alternate MDB [ 498.656605][ T9749] hfs: continuing without an alternate MDB [ 498.754065][ T9749] hfs: request for non-existent node 293 in B*Tree [ 498.769764][ T9749] hfs: request for non-existent node 293 in B*Tree [ 498.783141][ T9749] hfs: get root inode failed [ 498.864421][ T5116] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 499.126287][ T5116] usb 6-1: config 0 has an invalid interface number: 247 but max is 0 [ 499.135123][ T5116] usb 6-1: config 0 has no interface number 0 [ 499.141508][ T5116] usb 6-1: too many endpoints for config 0 interface 247 altsetting 138: 111, using maximum allowed: 30 [ 499.154514][ T5116] usb 6-1: config 0 interface 247 altsetting 138 has 0 endpoint descriptors, different from the interface descriptor's value: 111 [ 499.350308][ T5116] usb 6-1: config 0 interface 247 has no altsetting 0 [ 499.393050][ T5116] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 499.442631][ T5116] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.515364][ T5116] usb 6-1: config 0 descriptor?? [ 499.674653][ T5828] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 499.865553][ T5116] usb 6-1: Cannot read MAC address [ 499.916772][ T5116] MOSCHIP usb-ethernet driver: probe of 6-1:0.247 failed with error -32 [ 501.544090][ T5828] usb 4-1: Using ep0 maxpacket: 32 [ 501.771823][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.792880][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.804899][ T5828] usb 4-1: no configurations [ 501.810440][ T5828] usb 4-1: can't read configurations, error -22 [ 501.845036][ T785] usb 6-1: USB disconnect, device number 12 [ 501.991464][ T5828] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 502.356077][ T5828] usb 4-1: Using ep0 maxpacket: 32 [ 502.391423][ T5828] usb 4-1: no configurations [ 502.444525][ T5828] usb 4-1: can't read configurations, error -22 [ 502.534076][ T5828] usb usb4-port1: attempt power cycle [ 506.564816][ T9805] loop3: detected capacity change from 0 to 1024 [ 506.655614][ T9805] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 506.693502][ T9805] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 506.781818][ T5793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 511.107099][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 513.108659][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 513.203079][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 513.368210][ T9] usb 5-1: config 0 has no interfaces? [ 513.379307][ T9] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 513.394440][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.408826][ T9] usb 5-1: config 0 descriptor?? [ 517.120997][ T9] usb 5-1: USB disconnect, device number 10 [ 519.371694][ T9866] can0: slcan on ttyprintk. [ 519.575043][ T9865] can0 (unregistered): slcan off ttyprintk. [ 519.817925][ T9874] loop3: detected capacity change from 0 to 1024 [ 520.010593][ T9877] loop4: detected capacity change from 0 to 64 [ 521.814163][ T6812] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 522.034372][ T6812] usb 5-1: Using ep0 maxpacket: 32 [ 522.051293][ T6812] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 522.334880][ T6812] usb 5-1: config 0 has no interfaces? [ 522.341368][ T7432] hfsplus: b-tree write err: -5, ino 4 [ 522.341595][ T9884] loop6: detected capacity change from 0 to 32768 [ 522.347797][ T6812] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 522.419825][ T9902] netlink: 8 bytes leftover after parsing attributes in process `syz.5.879'. [ 522.498576][ T6812] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.821138][ T6812] usb 5-1: config 0 descriptor?? [ 524.733763][ T8162] usb 5-1: USB disconnect, device number 11 [ 525.219397][ T9924] can0: slcan on ttyprintk. [ 525.814861][ T9923] can0 (unregistered): slcan off ttyprintk. [ 528.346566][ T9939] netlink: 8 bytes leftover after parsing attributes in process `syz.6.886'. [ 528.384625][ T9939] netlink: 20 bytes leftover after parsing attributes in process `syz.6.886'. [ 528.466497][ T9939] netlink: 8 bytes leftover after parsing attributes in process `syz.6.886'. [ 528.491474][ T9939] netlink: 20 bytes leftover after parsing attributes in process `syz.6.886'. [ 530.956501][ T9959] loop5: detected capacity change from 0 to 128 [ 531.532425][ T9965] syz.4.893 (9965) used greatest stack depth: 19784 bytes left [ 531.831826][ T9972] loop5: detected capacity change from 0 to 256 [ 531.888043][ T9972] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb5f96684, utbl_chksum : 0xe619d30d) [ 531.925683][ T9972] exfat: Unknown parameter '18446744073709551615@LqE: 艞t}0$' [ 533.566676][ T9990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.900'. [ 533.576563][ T9990] netlink: 20 bytes leftover after parsing attributes in process `syz.3.900'. [ 534.777687][ T5101] Bluetooth: hci3: command 0x0406 tx timeout [ 534.801040][ T9990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.900'. [ 535.046155][ T9990] netlink: 20 bytes leftover after parsing attributes in process `syz.3.900'. [ 536.340446][ T9994] netlink: 8 bytes leftover after parsing attributes in process `syz.5.902'. [ 536.352974][ T9994] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 536.360949][ T9994] IPv6: NLM_F_CREATE should be set when creating new route [ 536.774801][ T9997] loop6: detected capacity change from 0 to 128 [ 537.977543][T10005] loop4: detected capacity change from 0 to 4096 [ 538.096098][T10005] ntfs3: loop4: ino=b, Correct links count -> 1. [ 538.112236][T10005] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 538.204071][ T28] audit: type=1800 audit(1755879343.033:9): pid=10005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.907" name="file1" dev="loop4" ino=33 res=0 errno=0 [ 538.531894][ T28] audit: type=1800 audit(1755879343.363:10): pid=10014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.907" name="file1" dev="loop4" ino=33 res=0 errno=0 [ 538.774329][ T27] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 539.274098][ T27] usb 4-1: Using ep0 maxpacket: 32 [ 539.305268][ T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 539.315639][ T27] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 539.325314][ T27] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 539.334884][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.346477][ T27] usb 4-1: config 0 descriptor?? [ 539.663033][T10026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.914'. [ 539.673235][T10026] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 539.680575][T10026] IPv6: NLM_F_CREATE should be set when creating new route [ 541.459452][T10047] can0: slcan on ttyprintk. [ 541.546541][T10043] can0 (unregistered): slcan off ttyprintk. [ 541.583420][T10049] loop4: detected capacity change from 0 to 256 [ 541.608432][ T9] usb 4-1: USB disconnect, device number 12 [ 541.690445][T10049] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb5f96684, utbl_chksum : 0xe619d30d) [ 541.764764][T10049] exfat: Unknown parameter '18446744073709551615@LqE: 艞t}0$' [ 541.800827][T10054] loop5: detected capacity change from 0 to 64 [ 544.324434][ T5101] Bluetooth: hci3: command 0x0406 tx timeout [ 544.502753][T10086] loop5: detected capacity change from 0 to 256 [ 544.659636][T10086] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb5f96684, utbl_chksum : 0xe619d30d) [ 544.774555][ T8162] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 544.784402][T10086] exfat: Unknown parameter '18446744073709551615@LqE: 艞t}0$' [ 545.014368][ T8162] usb 4-1: Using ep0 maxpacket: 32 [ 545.026892][ T8162] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 545.044949][ T8162] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 545.064437][ T8162] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 545.073554][ T8162] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.095125][ T8162] usb 4-1: config 0 descriptor?? [ 546.582760][T10115] loop4: detected capacity change from 0 to 1024 [ 546.592831][T10118] loop5: detected capacity change from 0 to 128 [ 546.665227][T10115] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 546.771958][T10115] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 547.970968][ T6013] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.273062][ T9] usb 4-1: USB disconnect, device number 13 [ 548.609326][T10143] loop6: detected capacity change from 0 to 256 [ 550.352480][T10143] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xb5f96684, utbl_chksum : 0xe619d30d) [ 550.727006][T10143] exfat: Unknown parameter '18446744073709551615@LqE: 艞t}0$' [ 553.532211][T10171] loop5: detected capacity change from 0 to 128 [ 553.657156][ T6812] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 553.864243][ T6812] usb 4-1: Using ep0 maxpacket: 16 [ 553.872350][ T6812] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 553.882011][ T6812] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 553.888300][T10164] loop6: detected capacity change from 0 to 32768 [ 553.899537][ T6812] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 553.912965][ T6812] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 553.931884][ T6812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.940461][ T6812] usb 4-1: Product: syz [ 553.950644][T10164] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 553.951191][ T6812] usb 4-1: Manufacturer: syz [ 553.968557][ T6812] usb 4-1: SerialNumber: syz [ 554.009331][T10164] XFS (loop6): Ending clean mount [ 554.027688][T10164] XFS (loop6): Quotacheck needed: Please wait. [ 554.044917][ T785] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 554.095405][T10164] XFS (loop6): Quotacheck: Done. [ 554.172924][ T6060] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 554.246988][ T785] usb 6-1: Using ep0 maxpacket: 32 [ 554.260584][ T785] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 554.273249][ T785] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 554.323166][ T785] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 554.351450][ T785] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.370960][ T785] usb 6-1: config 0 descriptor?? [ 554.393688][ T6812] usb 4-1: 0:2 : does not exist [ 554.415415][ T6812] usb 4-1: 1:0: cannot get min/max values for control 4 (id 1) [ 554.460791][ T6812] usb 4-1: USB disconnect, device number 14 [ 554.521809][ T9799] udevd[9799]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 555.764233][ T5101] Bluetooth: hci3: command 0x0406 tx timeout [ 557.490974][ T785] usb 6-1: USB disconnect, device number 13 [ 557.632360][T10211] loop3: detected capacity change from 0 to 128 [ 557.654186][T10211] gfs2: gfs2 mount does not exist [ 558.490162][T10217] loop5: detected capacity change from 0 to 1024 [ 558.508482][T10213] loop6: detected capacity change from 0 to 128 [ 558.684620][ T785] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 558.697809][ T48] hfsplus: b-tree write err: -5, ino 4 [ 558.805415][ T48] hfsplus: b-tree write err: -5, ino 4 [ 558.974375][ T785] usb 5-1: Using ep0 maxpacket: 16 [ 558.998851][ T785] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 22, changing to 8 [ 559.039001][ T785] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 25723, setting to 1024 [ 559.089010][ T785] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 559.107674][ T785] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.131752][ T785] usb 5-1: Product: syz [ 559.152858][ T785] usb 5-1: Manufacturer: syz [ 559.184782][ T785] usb 5-1: SerialNumber: syz [ 559.221497][ T785] usb 5-1: config 0 descriptor?? [ 559.302618][T10214] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 559.322712][ T785] hub 5-1:0.0: bad descriptor, ignoring hub [ 559.338751][ T785] hub: probe of 5-1:0.0 failed with error -5 [ 559.372245][ T785] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input9 [ 559.408393][ C1] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 560.633847][ T9] usb 5-1: USB disconnect, device number 12 [ 561.496853][T10237] netlink: 'syz.6.967': attribute type 10 has an invalid length. [ 563.192577][T10237] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.200213][T10237] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.217151][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.223494][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.294612][ T9793] udevd[9793]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 563.305614][ T9793] udevd[9793]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 563.347739][T10237] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.355031][T10237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 563.363578][T10237] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.370856][T10237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 563.399902][T10237] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 563.413844][T10246] netlink: 8 bytes leftover after parsing attributes in process `syz.5.968'. [ 563.998808][T10251] loop3: detected capacity change from 0 to 4096 [ 564.901413][T10258] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 564.954819][T10259] netlink: 8 bytes leftover after parsing attributes in process `syz.5.973'. [ 564.963758][T10259] netlink: 20 bytes leftover after parsing attributes in process `syz.5.973'. [ 564.977093][T10259] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 564.985953][T10259] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 564.995404][T10259] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.004172][T10259] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.014233][T10259] netlink: 8 bytes leftover after parsing attributes in process `syz.5.973'. [ 565.023040][T10259] netlink: 20 bytes leftover after parsing attributes in process `syz.5.973'. [ 565.059909][ T28] audit: type=1800 audit(1755879369.893:11): pid=10251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.971" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 565.446679][T10264] loop4: detected capacity change from 0 to 128 [ 567.246184][T10281] loop3: detected capacity change from 0 to 256 [ 569.824631][T10274] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 569.936600][T10281] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb5f96684, utbl_chksum : 0xe619d30d) [ 570.027864][T10281] exfat: Unknown parameter '18446744073709551615@LqE: 艞t}0$' [ 572.943819][T10288] loop5: detected capacity change from 0 to 32768 [ 573.046560][T10288] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 573.562093][T10299] OCFS2: ERROR (device loop5): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #2304 has bad signature [ 573.607140][T10299] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 573.637846][T10299] OCFS2: File system is now read-only. [ 573.677007][T10299] (syz.5.983,10299,0):ocfs2_search_chain:1785 ERROR: status = -30 [ 573.735310][T10299] (syz.5.983,10299,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 573.779696][T10299] (syz.5.983,10299,0):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 573.814203][T10299] (syz.5.983,10299,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 573.848649][T10299] (syz.5.983,10299,0):__ocfs2_claim_clusters:2355 ERROR: status = -30 [ 573.886219][T10309] 9pnet_fd: Insufficient options for proto=fd [ 573.894545][T10299] (syz.5.983,10299,0):__ocfs2_claim_clusters:2363 ERROR: status = -30 [ 573.912802][T10299] (syz.5.983,10299,0):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 573.923782][T10309] can0: slcan on ttyprintk. [ 573.961965][T10299] (syz.5.983,10299,0):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 574.005222][T10299] (syz.5.983,10299,0):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 574.022572][T10299] (syz.5.983,10299,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 574.035722][T10299] (syz.5.983,10299,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 574.044901][T10299] (syz.5.983,10299,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 574.056256][T10299] (syz.5.983,10299,0):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30 [ 574.114193][T10308] can0 (unregistered): slcan off ttyprintk. [ 574.116634][T10299] (syz.5.983,10299,0):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 574.133882][T10299] (syz.5.983,10299,0):ocfs2_expand_inline_dir:2858 ERROR: status = -30 [ 574.146290][T10299] (syz.5.983,10299,0):ocfs2_extend_dir:3205 ERROR: status = -30 [ 574.164621][T10299] (syz.5.983,10299,0):ocfs2_prepare_dir_for_insert:4326 ERROR: status = -30 [ 574.173499][T10299] (syz.5.983,10299,0):ocfs2_rename:1485 ERROR: status = -30 [ 574.203914][T10299] (syz.5.983,10299,0):ocfs2_rename:1690 ERROR: status = -30 [ 574.339468][T10299] syz.5.983 (10299) used greatest stack depth: 17552 bytes left [ 574.397764][ T6055] (syz-executor,6055,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 574.519906][ T6055] ocfs2: Unmounting device (7,5) on (node local) [ 576.129150][T10347] Bluetooth: hci0: load_link_keys: too big key_count value 2816 [ 577.271750][T10349] loop3: detected capacity change from 0 to 40427 [ 577.303545][T10349] F2FS-fs (loop3): invalid crc value [ 577.340992][T10349] F2FS-fs (loop3): Found nat_bits in checkpoint [ 577.384542][T10349] F2FS-fs (loop3): Start checkpoint disabled! [ 577.416186][T10349] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 578.561686][ T3427] kworker/u4:7: attempt to access beyond end of device [ 578.561686][ T3427] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 578.639105][ T3427] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 578.697325][T10362] loop4: detected capacity change from 0 to 512 [ 578.705326][ T3427] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 578.742759][T10362] EXT4-fs: Ignoring removed nobh option [ 578.761010][ T3427] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 579.025861][T10362] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 579.103460][T10362] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.997: iget: bad i_size value: 38620345925642 [ 579.189630][T10362] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.997: couldn't read orphan inode 15 (err -117) [ 579.313302][T10362] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 580.116473][ T3469] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm kworker/u4:8: bg 0: block 5: invalid block bitmap [ 580.174613][ T3469] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 288 with error 28 [ 580.270256][ T3469] EXT4-fs (loop4): This should not happen!! Data will be lost [ 580.270256][ T3469] [ 580.318644][ T3469] EXT4-fs (loop4): Total free blocks count 0 [ 580.344107][ T3469] EXT4-fs (loop4): Free/Dirty block details [ 580.365596][ T3469] EXT4-fs (loop4): free_blocks=0 [ 580.377270][ T3469] EXT4-fs (loop4): dirty_blocks=288 [ 580.394672][ T3469] EXT4-fs (loop4): Block reservation details [ 580.411327][ T3469] EXT4-fs (loop4): i_reserved_data_blocks=288 [ 580.461580][ T6013] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.705513][ T5882] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 581.194104][ T5882] usb 4-1: Using ep0 maxpacket: 16 [ 581.228174][ T5882] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 581.270756][ T5882] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 581.339122][ T5882] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 581.384324][ T5882] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 581.408085][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.280122][ T5882] usb 4-1: Product: syz [ 582.303273][ T5882] usb 4-1: Manufacturer: syz [ 582.419871][ T5882] usb 4-1: SerialNumber: syz [ 583.136194][ T5882] usb 4-1: 0:2 : does not exist [ 583.184763][ T5882] usb 4-1: 1:0: cannot get min/max values for control 4 (id 1) [ 583.497516][T10414] Bluetooth: hci0: load_link_keys: too big key_count value 2816 [ 583.814129][ T5882] usb 4-1: USB disconnect, device number 15 [ 583.864135][ T9799] udevd[9799]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 586.247064][ T8889] Bluetooth: hci3: command 0x0406 tx timeout [ 587.777198][T10441] 9pnet_fd: Insufficient options for proto=fd [ 587.803247][T10441] can0: slcan on ttyprintk. [ 587.876482][T10440] can0 (unregistered): slcan off ttyprintk. [ 588.052542][T10442] loop4: detected capacity change from 0 to 128 [ 593.047388][T10457] loop6: detected capacity change from 0 to 1024 [ 594.082695][ T5897] hfsplus: b-tree write err: -5, ino 4 [ 595.482554][T10468] loop3: detected capacity change from 0 to 32768 [ 596.395018][T10472] loop5: detected capacity change from 0 to 40427 [ 596.423637][T10472] F2FS-fs (loop5): Small segment_count (9 < 1 * 24) [ 596.431486][T10472] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 596.453142][T10472] F2FS-fs (loop5): Found nat_bits in checkpoint [ 596.610024][T10472] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 596.617250][T10472] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 597.841298][ T6055] syz-executor: attempt to access beyond end of device [ 597.841298][ T6055] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 597.870474][ T6055] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 598.480931][T10494] loop4: detected capacity change from 0 to 1024 [ 599.355026][ T3488] hfsplus: b-tree write err: -5, ino 4 [ 602.894270][ T5882] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 603.066827][T10532] loop5: detected capacity change from 0 to 1024 [ 603.089714][ T5882] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 603.252805][ T5828] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 603.261114][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.271512][ T5882] usb 4-1: Product: syz [ 603.291159][ T3427] hfsplus: b-tree write err: -5, ino 4 [ 603.304993][ T5882] usb 4-1: Manufacturer: syz [ 603.341030][ T5882] usb 4-1: SerialNumber: syz [ 603.361763][ T5882] usb 4-1: config 0 descriptor?? [ 603.459247][ T5828] usb 5-1: Using ep0 maxpacket: 16 [ 603.467338][ T5828] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 603.479543][ T5828] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 603.500067][ T5828] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 603.526971][ T5828] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 603.537472][ T5828] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.554424][ T5828] usb 5-1: Product: syz [ 603.558702][ T5828] usb 5-1: Manufacturer: syz [ 603.563380][ T5828] usb 5-1: SerialNumber: syz [ 603.690439][T10523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1040'. [ 603.750056][T10523] team_slave_0: entered promiscuous mode [ 603.756428][T10523] team_slave_1: entered promiscuous mode [ 603.783632][T10523] macvtap1: entered promiscuous mode [ 603.789884][T10523] team0: entered promiscuous mode [ 603.837020][T10523] macvtap1: entered allmulticast mode [ 603.884426][T10523] team0: entered allmulticast mode [ 603.897264][T10523] team_slave_0: entered allmulticast mode [ 603.909865][T10523] team_slave_1: entered allmulticast mode [ 603.923290][T10523] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 604.048768][ T5897] hfsplus: b-tree write err: -5, ino 4 [ 604.288876][ T5828] usb 5-1: 0:2 : does not exist [ 604.408334][ T5828] usb 5-1: 1:0: cannot get min/max values for control 4 (id 1) [ 604.476648][T10537] team0: left allmulticast mode [ 604.481735][T10537] team_slave_0: left allmulticast mode [ 604.524399][ T5828] usb 5-1: USB disconnect, device number 13 [ 604.532021][T10537] team_slave_1: left allmulticast mode [ 604.558480][T10537] team0: left promiscuous mode [ 604.582268][T10537] team_slave_0: left promiscuous mode [ 604.587864][T10537] team_slave_1: left promiscuous mode [ 604.592620][ T9799] udevd[9799]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 604.690585][ T5882] cx82310_eth: probe of 4-1:0.0 failed with error -22 [ 604.709248][ T5882] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 604.735607][ T5882] usb 4-1: USB disconnect, device number 16 [ 607.960813][T10562] loop4: detected capacity change from 0 to 1024 [ 608.902926][ T11] hfsplus: b-tree write err: -5, ino 4 [ 610.494372][ T8162] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 610.684253][ T8162] usb 4-1: Using ep0 maxpacket: 16 [ 610.705988][ T8162] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 610.754256][ T8162] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 610.863067][ T8162] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 610.937815][ T8162] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 610.947520][ T8162] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.994498][ T8162] usb 4-1: Product: syz [ 611.006974][ T8162] usb 4-1: Manufacturer: syz [ 611.050994][ T8162] usb 4-1: SerialNumber: syz [ 612.814777][ T8162] usb 4-1: 0:2 : does not exist [ 612.861969][ T8162] usb 4-1: 1:0: cannot get min/max values for control 4 (id 1) [ 612.958024][T10605] loop5: detected capacity change from 0 to 1024 [ 612.990184][ T8162] usb 4-1: USB disconnect, device number 17 [ 613.154145][ T5101] Bluetooth: hci3: command 0x0406 tx timeout [ 614.276665][ T3427] hfsplus: b-tree write err: -5, ino 4 [ 614.352812][ T9799] udevd[9799]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 618.244091][ T8889] Bluetooth: hci3: command 0x0406 tx timeout [ 619.330297][T10640] loop5: detected capacity change from 0 to 1024 [ 620.297035][ T3469] hfsplus: b-tree write err: -5, ino 4 [ 622.083930][T10657] netlink: 27 bytes leftover after parsing attributes in process `syz.5.1079'. [ 622.822948][T10662] loop5: detected capacity change from 0 to 128 [ 624.846032][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.168063][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.398828][T10673] loop4: detected capacity change from 0 to 1024 [ 625.985152][T10678] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1086'. [ 626.656366][ T3469] hfsplus: b-tree write err: -5, ino 4 [ 626.701785][T10678] erspan0: entered promiscuous mode [ 626.808472][T10678] macvtap1: entered promiscuous mode [ 627.873731][T10678] macvtap1: entered allmulticast mode [ 627.919224][T10678] erspan0: entered allmulticast mode [ 628.065192][T10683] erspan0: left allmulticast mode [ 628.083419][T10683] erspan0: left promiscuous mode [ 628.333499][T10694] loop5: detected capacity change from 0 to 4096 [ 629.136770][T10710] loop3: detected capacity change from 0 to 512 [ 629.159261][T10710] EXT4-fs: Ignoring removed nobh option [ 629.230756][T10710] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 629.530523][T10710] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.1092: iget: bad i_size value: 38620345925642 [ 629.558523][T10710] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1092: couldn't read orphan inode 15 (err -117) [ 629.642393][T10710] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 629.970792][ T5793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 631.386942][T10726] loop4: detected capacity change from 0 to 1024 [ 632.733134][ T3488] hfsplus: b-tree write err: -5, ino 4 [ 634.113544][T10749] loop6: detected capacity change from 0 to 128 [ 634.186698][T10751] loop4: detected capacity change from 0 to 512 [ 634.218464][T10751] EXT4-fs: Ignoring removed nobh option [ 634.238906][T10751] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 634.263803][T10733] loop3: detected capacity change from 0 to 32768 [ 634.290831][T10751] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.1102: iget: bad i_size value: 38620345925642 [ 634.350670][T10751] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1102: couldn't read orphan inode 15 (err -117) [ 634.427252][T10749] syz.6.1104: attempt to access beyond end of device [ 634.427252][T10749] loop6: rw=2049, sector=145, nr_sectors = 384 limit=128 [ 634.448835][T10751] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 634.632466][T10748] syz.6.1104: attempt to access beyond end of device [ 634.632466][T10748] loop6: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 634.956647][ T6035] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm kworker/u4:11: bg 0: block 5: invalid block bitmap [ 635.014993][ T6035] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 572 with error 28 [ 635.059356][ T6035] EXT4-fs (loop4): This should not happen!! Data will be lost [ 635.059356][ T6035] [ 635.097233][ T6035] EXT4-fs (loop4): Total free blocks count 0 [ 635.114732][ T6035] EXT4-fs (loop4): Free/Dirty block details [ 635.123777][ T6035] EXT4-fs (loop4): free_blocks=0 [ 635.141964][ T6035] EXT4-fs (loop4): dirty_blocks=572 [ 635.154662][ T6035] EXT4-fs (loop4): Block reservation details [ 635.177944][ T6035] EXT4-fs (loop4): i_reserved_data_blocks=572 [ 635.253763][ T6013] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 639.947054][T10791] bridge0: port 3(syz_tun) entered blocking state [ 639.964900][T10791] bridge0: port 3(syz_tun) entered disabled state [ 639.982154][T10791] syz_tun: entered allmulticast mode [ 640.000536][T10791] syz_tun: entered promiscuous mode [ 640.049412][T10791] bridge0: port 3(syz_tun) entered blocking state [ 640.056608][T10791] bridge0: port 3(syz_tun) entered forwarding state [ 640.260767][T10780] loop6: detected capacity change from 0 to 32768 [ 641.873559][T10799] binder: 10798:10799 ioctl c0306201 200000000080 returned -14 [ 645.414221][T10827] Bluetooth: hci0: load_link_keys: too big key_count value 2816 [ 645.866912][T10832] loop3: detected capacity change from 0 to 16 [ 646.135427][T10832] erofs: (device loop3): erofs_read_inode: unsupported i_format 32 of nid 36 [ 648.915840][T10836] netlink: zone id is out of range [ 648.921737][T10836] netlink: set zone limit has 4 unknown bytes [ 651.898746][T10865] Bluetooth: hci0: load_link_keys: too big key_count value 2816 [ 651.930972][ T5988] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 652.234164][ T5988] usb 4-1: Using ep0 maxpacket: 16 [ 652.251239][ T5988] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 652.260400][ T5988] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 652.279432][ T5988] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 652.297076][ T5988] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 652.326229][ T5988] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.341915][ T5988] usb 4-1: Product: syz [ 652.350215][ T5988] usb 4-1: Manufacturer: syz [ 652.359230][ T5988] usb 4-1: SerialNumber: syz [ 654.592906][ T5988] usb 4-1: 0:2 : does not exist [ 654.801476][ T5988] usb 4-1: 1:0: cannot get min/max values for control 4 (id 1) [ 655.292765][ T5988] usb 4-1: USB disconnect, device number 18 [ 656.357563][ T9799] udevd[9799]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 657.459476][T10900] tipc: Started in network mode [ 657.470942][T10900] tipc: Node identity 7aaa1adee776, cluster identity 4711 [ 657.544437][T10900] tipc: Enabled bearer , priority 0 [ 657.581746][T10905] syzkaller0: entered promiscuous mode [ 657.588115][T10904] can0: slcan on ttyprintk. [ 657.605914][T10905] syzkaller0: entered allmulticast mode [ 657.673668][T10900] tipc: Resetting bearer [ 657.695566][T10903] can0 (unregistered): slcan off ttyprintk. [ 657.720111][T10899] tipc: Resetting bearer [ 657.805367][T10899] tipc: Disabling bearer [ 658.191360][T10912] loop5: detected capacity change from 0 to 32768 [ 658.198673][T10912] XFS: ikeep mount option is deprecated. [ 658.294398][T10912] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 658.973210][T10912] XFS (loop5): Ending clean mount [ 659.020074][T10912] XFS (loop5): Quotacheck needed: Please wait. [ 659.388565][T10912] XFS (loop5): Quotacheck: Done. [ 660.667018][ T6055] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 660.745868][T10943] can0: slcan on ttyprintk. [ 661.014300][T10940] can0 (unregistered): slcan off ttyprintk. [ 667.187879][T11004] can0: slcan on ttyprintk. [ 667.361618][T10999] can0 (unregistered): slcan off ttyprintk. [ 668.644124][ T5101] Bluetooth: hci3: command 0x0406 tx timeout [ 669.453863][ T5882] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 669.744896][ T5882] usb 6-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 669.762333][ T5882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.828204][ T5882] usb 6-1: Product: syz [ 669.871116][ T5882] usb 6-1: Manufacturer: syz [ 669.922035][ T5882] usb 6-1: SerialNumber: syz [ 670.081512][ T5882] usb 6-1: config 0 descriptor?? [ 670.476390][ T5882] cx82310_eth: probe of 6-1:0.0 failed with error -22 [ 670.674500][ T5882] cxacru 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 670.719107][ T5882] usb 6-1: USB disconnect, device number 14 [ 670.841898][T11049] can0: slcan on ttyprintk. [ 670.864022][T11047] tipc: Started in network mode [ 670.896386][T11047] tipc: Node identity 76bbe3081578, cluster identity 4711 [ 670.943473][T11047] tipc: Enabled bearer , priority 0 [ 671.154702][T11052] syzkaller0: entered promiscuous mode [ 671.196123][T11048] can0 (unregistered): slcan off ttyprintk. [ 671.232749][T11052] syzkaller0: entered allmulticast mode [ 671.747382][T11052] tipc: Resetting bearer [ 671.792427][T11046] tipc: Resetting bearer [ 671.846328][T11046] tipc: Disabling bearer [ 672.718045][T11074] loop6: detected capacity change from 0 to 512 [ 672.734023][ T8889] Bluetooth: hci3: command 0x0406 tx timeout [ 672.758241][T11074] EXT4-fs: Ignoring removed nobh option [ 672.767809][T11074] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 673.032078][T11074] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.1198: iget: bad i_size value: 38620345925642 [ 673.073168][T11074] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.1198: couldn't read orphan inode 15 (err -117) [ 673.110862][T11074] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 673.417277][ T48] EXT4-fs error (device loop6): ext4_validate_block_bitmap:430: comm kworker/u4:3: bg 0: block 5: invalid block bitmap [ 673.455144][ T48] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 728 with error 28 [ 673.489766][ T48] EXT4-fs (loop6): This should not happen!! Data will be lost [ 673.489766][ T48] [ 673.515892][ T48] EXT4-fs (loop6): Total free blocks count 0 [ 673.533496][ T48] EXT4-fs (loop6): Free/Dirty block details [ 673.549763][ T48] EXT4-fs (loop6): free_blocks=0 [ 673.567488][ T48] EXT4-fs (loop6): dirty_blocks=728 [ 673.582974][ T48] EXT4-fs (loop6): Block reservation details [ 673.601806][ T48] EXT4-fs (loop6): i_reserved_data_blocks=728 [ 673.671850][ T6060] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 673.913554][T11077] loop3: detected capacity change from 0 to 32768 [ 675.667587][T11098] tipc: Started in network mode [ 675.682369][T11098] tipc: Node identity 3eca36318b07, cluster identity 4711 [ 675.712443][T11098] tipc: Enabled bearer , priority 0 [ 675.734141][T11099] syzkaller0: entered promiscuous mode [ 675.742392][T11099] syzkaller0: entered allmulticast mode [ 675.785901][T11098] tipc: Resetting bearer [ 675.834320][T11097] tipc: Resetting bearer [ 675.935461][T11097] tipc: Disabling bearer [ 675.972496][T11102] can0: slcan on ttyprintk. [ 676.045161][T11101] can0 (unregistered): slcan off ttyprintk. [ 676.152111][T11104] loop5: detected capacity change from 0 to 1024 [ 676.160468][T11104] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 676.172162][ T5101] Bluetooth: hci3: command 0x0406 tx timeout [ 676.243201][T11104] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 678.071606][ T6055] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 678.142196][T11127] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1214'. [ 678.401251][T11129] bridge0: port 1(erspan0) entered blocking state [ 678.430512][T11129] bridge0: port 1(erspan0) entered disabled state [ 678.480782][T11133] loop4: detected capacity change from 0 to 128 [ 678.864923][T11129] erspan0: entered allmulticast mode [ 678.872097][T11129] erspan0: entered promiscuous mode [ 678.980576][T11132] erspan0: left allmulticast mode [ 679.002957][T11132] erspan0: left promiscuous mode [ 679.056679][T11132] bridge0: port 1(erspan0) entered disabled state [ 680.467155][T11150] loop5: detected capacity change from 0 to 1024 [ 680.528688][T11150] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 680.612595][T11150] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 681.434053][ T785] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 681.686231][ T785] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 681.705760][ T785] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.713847][ T785] usb 5-1: Product: syz [ 681.743981][ T785] usb 5-1: Manufacturer: syz [ 681.748655][ T785] usb 5-1: SerialNumber: syz [ 681.769068][ T785] usb 5-1: config 0 descriptor?? [ 681.995040][T11157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1225'. [ 682.037573][T11157] bond_slave_0: entered promiscuous mode [ 682.043858][T11157] bond_slave_1: entered promiscuous mode [ 682.074720][T11157] macvtap1: entered promiscuous mode [ 682.080116][T11157] bond0: entered promiscuous mode [ 682.110132][T11157] macvtap1: entered allmulticast mode [ 682.124686][T11157] bond0: entered allmulticast mode [ 682.129909][T11157] bond_slave_0: entered allmulticast mode [ 682.154065][T11157] bond_slave_1: entered allmulticast mode [ 682.168334][T11157] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 682.230390][T11166] bond0: left allmulticast mode [ 682.264039][T11166] bond_slave_0: left allmulticast mode [ 682.317469][T11166] bond_slave_1: left allmulticast mode [ 682.323243][T11166] bond0: left promiscuous mode [ 682.343250][T11166] bond_slave_0: left promiscuous mode [ 682.348890][T11166] bond_slave_1: left promiscuous mode [ 682.390170][ T785] cx82310_eth: probe of 5-1:0.0 failed with error -22 [ 682.475726][ T785] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 682.508151][ T785] usb 5-1: USB disconnect, device number 14 [ 682.730444][ T6055] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 683.815867][ T785] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 684.000761][T11192] can0: slcan on ttyprintk. [ 684.011095][T11190] 9pnet: Could not find request transport: fd0x0000000000000004 [ 684.019329][ T785] usb 5-1: Using ep0 maxpacket: 16 [ 684.031984][ T785] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 684.052891][ T785] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 684.083052][ T785] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 684.104859][T11189] can0 (unregistered): slcan off ttyprintk. [ 684.111273][ T785] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 684.141029][ T785] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.168893][ T785] usb 5-1: Product: syz [ 684.177652][ T785] usb 5-1: Manufacturer: syz [ 684.200662][ T785] usb 5-1: SerialNumber: syz [ 684.679254][ T785] usb 5-1: 0:2 : does not exist [ 684.739296][T11201] loop6: detected capacity change from 0 to 1024 [ 684.804433][T11201] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 684.868786][T11201] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 685.087619][ T785] usb 5-1: 1:0: cannot get min/max values for control 4 (id 1) [ 685.184670][ T785] usb 5-1: USB disconnect, device number 15 [ 685.315407][ T9799] udevd[9799]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 685.604243][ T8889] Bluetooth: hci3: command 0x0406 tx timeout [ 686.018305][T11228] tipc: Enabled bearer , priority 0 [ 686.083860][T11228] syzkaller0: entered promiscuous mode [ 686.090659][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.102443][T11228] syzkaller0: entered allmulticast mode [ 687.106985][T11227] tipc: Resetting bearer [ 687.146971][ T5882] tipc: Node number set to 3050124849 [ 687.284058][T11227] tipc: Disabling bearer [ 688.446937][T11240] loop4: detected capacity change from 0 to 32768 [ 688.493774][ T6060] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 692.970967][T11282] tipc: Enabled bearer , priority 0 [ 692.978794][T11282] syzkaller0: entered promiscuous mode [ 692.994459][T11282] syzkaller0: entered allmulticast mode [ 693.326412][T11286] tipc: Resetting bearer [ 693.592292][T11280] loop6: detected capacity change from 0 to 4096 [ 693.603659][T11281] tipc: Resetting bearer [ 693.627359][T11280] ntfs3: Unknown parameter '184467440737095516150000000000000000000000000000000000000000000' [ 693.674192][T11281] tipc: Disabling bearer [ 693.770286][T11287] ptrace attach of "./syz-executor exec"[6060] was attempted by " x\x09\x0d\x07>Gvn}Iٷll!qIdlI$$(.\x09I$i2۽_{s3=gf83ˆ6(!!!,IvD%+wK221`=kǙ?dY\x0d$n٢Ƿgڞˋ;wХoB^&ի_v;$ҷ[;!KϾszжg{CݧC߾\x09m{JaPB^\x09\x0cJh۩m\x09\x0aJ0TP; ǥKC\x09 Kլ]0R3!\x09Cfr16!Mp)sPk/%-1\x0bt?PZWBaBH鳤Vp!B0N\x09Ň)DRT#ד3BF.ƇRF\x5c:t/%aEpW<\x0a~0r0tҥ=E+3 [ 693.851730][T11289] loop4: detected capacity change from 0 to 512 [ 693.989153][T11289] EXT4-fs: Ignoring removed bh option [ 693.996361][T11289] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 694.104665][T11289] EXT4-fs (loop4): 1 truncate cleaned up [ 694.149801][T11294] loop5: detected capacity change from 0 to 1024 [ 694.152649][T11289] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 694.334063][T11294] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 694.795893][T11294] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 695.263537][ T6055] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 695.274850][ T6013] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 700.149911][T11330] loop4: detected capacity change from 0 to 1024 [ 700.169957][T11330] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 700.245070][T11330] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 700.588044][ T6013] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 704.324050][ T5882] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 704.434095][ T5988] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 704.536089][ T5882] usb 4-1: config 0 has an invalid interface number: 247 but max is 0 [ 704.546145][ T5882] usb 4-1: config 0 has no interface number 0 [ 704.552382][ T5882] usb 4-1: too many endpoints for config 0 interface 247 altsetting 138: 111, using maximum allowed: 30 [ 704.564748][ T5882] usb 4-1: config 0 interface 247 altsetting 138 has 0 endpoint descriptors, different from the interface descriptor's value: 111 [ 704.578626][ T5882] usb 4-1: config 0 interface 247 has no altsetting 0 [ 704.585611][ T5882] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 704.594921][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.606005][ T5882] usb 4-1: config 0 descriptor?? [ 704.634941][ T5988] usb 5-1: Using ep0 maxpacket: 16 [ 704.667946][ T5988] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 704.677411][ T5988] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 704.690635][ T5988] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 704.721692][ T5988] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 704.732177][ T5988] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.838858][ T5988] usb 5-1: Product: syz [ 704.843239][ T5988] usb 5-1: Manufacturer: syz [ 704.848097][ T5988] usb 5-1: SerialNumber: syz [ 705.534350][ T5882] usb 4-1: string descriptor 0 read error: -71 [ 705.548115][ T5882] usb 4-1: Cannot read MAC address [ 705.559011][ T5882] MOSCHIP usb-ethernet driver: probe of 4-1:0.247 failed with error -71 [ 705.574195][ T5882] usb 4-1: USB disconnect, device number 19 [ 705.574393][ T5988] usb 5-1: 0:2 : does not exist [ 705.590354][T11366] loop5: detected capacity change from 0 to 1024 [ 705.628778][T11366] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 705.685877][T11366] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 706.069917][ T6055] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.194060][ T5988] usb 5-1: 1:0: cannot get min/max values for control 4 (id 1) [ 706.961658][ T5988] usb 5-1: USB disconnect, device number 16 [ 708.954774][ T9799] udevd[9799]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 709.421297][T11385] netlink: 'syz.3.1284': attribute type 3 has an invalid length. [ 709.429853][T11385] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1284'. [ 709.449211][T11385] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1284'. [ 711.582979][T11380] loop5: detected capacity change from 0 to 32768 [ 712.221659][T11399] loop3: detected capacity change from 0 to 1024 [ 712.263495][T11399] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 712.347732][T11399] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 714.039804][T11413] 9pnet_fd: Insufficient options for proto=fd [ 714.199785][T11416] can0: slcan on ttyprintk. [ 714.994553][T11412] can0 (unregistered): slcan off ttyprintk. [ 717.070547][ T5793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 720.849031][T11452] syz_tun: entered allmulticast mode [ 721.264016][ T785] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 721.464034][ T785] usb 6-1: Using ep0 maxpacket: 16 [ 721.480378][ T785] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 721.503278][ T785] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 721.518981][T11461] loop4: detected capacity change from 0 to 1024 [ 721.527456][ T785] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 721.542238][T11461] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 721.623697][ T785] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 721.643410][ T785] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.652002][ T785] usb 6-1: Product: syz [ 721.656846][ T785] usb 6-1: Manufacturer: syz [ 721.663188][ T785] usb 6-1: SerialNumber: syz [ 721.679090][T11461] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 722.458900][ T785] usb 6-1: 0:2 : does not exist [ 722.463813][ T6013] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 723.068816][ T785] usb 6-1: 1:0: cannot get min/max values for control 4 (id 1) [ 723.159613][ T785] usb 6-1: USB disconnect, device number 15 [ 723.421160][T11483] loop3: detected capacity change from 0 to 256 [ 723.447896][T11483] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 723.527921][T11484] netlink: 'syz.4.1313': attribute type 3 has an invalid length. [ 723.536536][T11484] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1313'. [ 725.506399][ T5786] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 726.385770][T11499] loop3: detected capacity change from 0 to 1024 [ 726.405285][T11499] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 726.545974][ T5786] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 726.691576][T11499] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 726.702567][ T5786] usb 5-1: config 0 has no interface number 0 [ 726.712920][ T5786] usb 5-1: config 0 interface 41 has no altsetting 0 [ 726.841046][ T5786] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 726.967654][ T5786] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.014266][ T5786] usb 5-1: Product: syz [ 727.018589][ T5786] usb 5-1: Manufacturer: syz [ 727.034020][ T5786] usb 5-1: SerialNumber: syz [ 727.167809][ T5786] usb 5-1: config 0 descriptor?? [ 727.910240][ T5793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 728.277487][ T5786] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 729.452111][T11520] netlink: 'syz.6.1326': attribute type 3 has an invalid length. [ 729.462287][T11520] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1326'. [ 729.841917][ T23] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 729.872563][ T5786] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 729.900275][ T5786] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 729.922387][ T5786] CoreChips: probe of 5-1:0.41 failed with error -71 [ 730.074265][ T23] usb 6-1: Using ep0 maxpacket: 16 [ 730.198673][ T23] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 730.223384][ T5786] usb 5-1: USB disconnect, device number 17 [ 730.432394][ T23] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 730.562397][ T23] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 731.393882][ T23] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 731.403557][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.412654][ T23] usb 6-1: Product: syz [ 731.417253][ T23] usb 6-1: Manufacturer: syz [ 731.422065][ T23] usb 6-1: SerialNumber: syz [ 731.541296][T11536] loop6: detected capacity change from 0 to 128 [ 731.885761][ T23] usb 6-1: 0:2 : does not exist [ 732.034240][ T5855] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 732.234302][ T5855] usb 5-1: Using ep0 maxpacket: 16 [ 732.259302][ T5855] usb 5-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 732.270079][ T5855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.280811][ T5855] usb 5-1: Product: syz [ 732.288330][ T5855] usb 5-1: Manufacturer: syz [ 732.293255][ T5855] usb 5-1: SerialNumber: syz [ 732.301117][ T5855] usb 5-1: config 0 descriptor?? [ 732.330959][ T23] usb 6-1: 1:0: cannot get min/max values for control 4 (id 1) [ 732.335757][ T5855] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 732.423132][ T23] usb 6-1: USB disconnect, device number 16 [ 732.534291][ T5855] pwc: Warning: more than 1 configuration available. [ 732.590034][ T5855] pwc: Failed to set LED on/off time (-71) [ 732.603981][ T5855] pwc: send_video_command error -71 [ 732.624320][ T5855] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 732.640778][ T5855] Philips webcam: probe of 5-1:0.0 failed with error -71 [ 732.653835][ T5855] usb 5-1: USB disconnect, device number 18 [ 734.024493][T11560] tipc: Enabled bearer , priority 0 [ 734.032762][T11560] syzkaller0: entered promiscuous mode [ 734.038460][T11560] syzkaller0: entered allmulticast mode [ 734.076636][T11559] tipc: Resetting bearer [ 734.146831][T11559] tipc: Disabling bearer [ 735.449245][T11577] loop4: detected capacity change from 0 to 128 [ 735.724080][ T5855] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 735.824037][ T23] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 735.924274][ T5855] usb 4-1: Using ep0 maxpacket: 16 [ 735.937353][ T5855] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 735.947095][ T5855] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 735.957766][ T5855] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 735.976531][ T5855] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 735.986476][ T5855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.994776][ T5855] usb 4-1: Product: syz [ 735.999954][ T5855] usb 4-1: Manufacturer: syz [ 736.009120][ T5855] usb 4-1: SerialNumber: syz [ 736.017023][ T23] usb 6-1: config 0 has an invalid interface number: 247 but max is 0 [ 736.030315][ T23] usb 6-1: config 0 has no interface number 0 [ 736.043822][ T23] usb 6-1: too many endpoints for config 0 interface 247 altsetting 138: 111, using maximum allowed: 30 [ 736.103835][ T23] usb 6-1: config 0 interface 247 altsetting 138 has 0 endpoint descriptors, different from the interface descriptor's value: 111 [ 736.121282][ T23] usb 6-1: config 0 interface 247 has no altsetting 0 [ 736.128643][ T23] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 736.138480][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.172508][ T23] usb 6-1: config 0 descriptor?? [ 736.485674][ T5855] usb 4-1: 0:2 : does not exist [ 736.595829][ T23] usb 6-1: string descriptor 0 read error: -71 [ 736.629003][ T23] usb 6-1: Cannot read MAC address [ 736.643537][ T23] MOSCHIP usb-ethernet driver: probe of 6-1:0.247 failed with error -71 [ 736.673757][ T23] usb 6-1: USB disconnect, device number 17 [ 736.912199][ T5855] usb 4-1: 1:0: cannot get min/max values for control 4 (id 1) [ 736.986870][ T5855] usb 4-1: USB disconnect, device number 20 [ 737.051977][ T9799] udevd[9799]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 737.072895][T11592] tipc: Started in network mode [ 737.086192][T11592] tipc: Node identity 72d2a66528c7, cluster identity 4711 [ 737.095013][T11592] tipc: Enabled bearer , priority 0 [ 737.103140][T11592] syzkaller0: entered promiscuous mode [ 737.113848][T11592] syzkaller0: entered allmulticast mode [ 737.163821][T11591] tipc: Resetting bearer [ 737.387642][T11591] tipc: Disabling bearer [ 737.873536][T11607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1354'. [ 738.120756][T11607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1354'. [ 740.348032][T11633] tipc: Enabled bearer , priority 0 [ 740.391217][T11633] tipc: Resetting bearer [ 740.430958][T11632] tipc: Disabling bearer [ 741.631683][T11651] loop6: detected capacity change from 0 to 128 [ 741.870846][T11661] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 741.878233][T11661] IPv6: NLM_F_CREATE should be set when creating new route [ 741.885690][T11661] IPv6: NLM_F_CREATE should be set when creating new route [ 741.892949][T11661] IPv6: NLM_F_CREATE should be set when creating new route [ 742.110623][T11667] loop4: detected capacity change from 0 to 512 [ 742.168691][T11667] EXT4-fs: Ignoring removed nobh option [ 742.215350][T11667] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 742.243556][T11667] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.1369: iget: bad i_size value: 38620345925642 [ 742.279412][T11667] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1369: couldn't read orphan inode 15 (err -117) [ 742.319649][T11667] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 742.740436][ T3469] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm kworker/u4:8: bg 0: block 5: invalid block bitmap [ 742.761265][ T3469] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 484 with error 28 [ 742.776136][ T3469] EXT4-fs (loop4): This should not happen!! Data will be lost [ 742.776136][ T3469] [ 742.786524][ T3469] EXT4-fs (loop4): Total free blocks count 0 [ 742.792642][ T3469] EXT4-fs (loop4): Free/Dirty block details [ 742.802406][ T3469] EXT4-fs (loop4): free_blocks=0 [ 742.808824][ T3469] EXT4-fs (loop4): dirty_blocks=484 [ 742.814512][ T3469] EXT4-fs (loop4): Block reservation details [ 742.820679][ T3469] EXT4-fs (loop4): i_reserved_data_blocks=484 [ 742.846723][ T6013] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 744.742671][T11696] loop4: detected capacity change from 0 to 128 [ 745.153432][T11699] loop6: detected capacity change from 0 to 256 [ 745.171809][T11699] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 747.536879][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.511544][T11733] loop3: detected capacity change from 0 to 256 [ 748.595066][T11733] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 750.486583][T11728] loop4: detected capacity change from 0 to 32768 [ 750.529056][T11728] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 751.490085][T11769] loop5: detected capacity change from 0 to 1024 [ 751.498766][T11769] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 751.550705][ T6013] ocfs2: Unmounting device (7,4) on (node local) [ 751.582112][T11769] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 753.163798][ T6055] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 754.892766][T11804] loop6: detected capacity change from 0 to 1024 [ 754.931037][T11806] loop3: detected capacity change from 0 to 128 [ 755.082543][T11804] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 755.691377][T11804] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 756.557941][ T6060] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 760.172607][T11851] loop4: detected capacity change from 0 to 256 [ 760.227972][T11851] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 760.514011][T11855] netlink: 'syz.3.1424': attribute type 3 has an invalid length. [ 760.522426][T11855] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1424'. [ 761.284145][ T785] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 761.669098][ T785] usb 6-1: Using ep0 maxpacket: 16 [ 761.729153][ T785] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 761.746892][ T785] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 761.796363][ T785] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 761.870010][T11865] loop4: detected capacity change from 0 to 1024 [ 761.916759][T11865] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 761.919835][ T785] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 761.950313][T11865] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 761.967251][ T785] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.983754][ T785] usb 6-1: Product: syz [ 761.997425][ T785] usb 6-1: Manufacturer: syz [ 762.012270][ T785] usb 6-1: SerialNumber: syz [ 762.791453][ T6013] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 762.940632][ T785] usb 6-1: 0:2 : does not exist [ 763.911584][ T785] usb 6-1: 1:0: failed to get current value for ch 0 (-22) [ 764.816559][ T785] usb 6-1: USB disconnect, device number 18 [ 765.031016][ T9799] udevd[9799]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 765.117055][T11890] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 765.124388][T11890] IPv6: NLM_F_CREATE should be set when creating new route [ 765.131875][T11890] IPv6: NLM_F_CREATE should be set when creating new route [ 765.139192][T11890] IPv6: NLM_F_CREATE should be set when creating new route [ 766.181630][T11899] loop3: detected capacity change from 0 to 1024 [ 766.374157][T11899] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 766.450386][T11906] netlink: 'syz.4.1439': attribute type 3 has an invalid length. [ 766.460020][T11906] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1439'. [ 767.125512][T11899] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 767.408004][T11917] Bluetooth: hci0: load_link_keys: too big key_count value 2816 [ 767.920982][T11905] loop5: detected capacity change from 0 to 512 [ 767.950035][T11913] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1441'. [ 767.977565][T11905] EXT4-fs: Ignoring removed nobh option [ 768.008415][T11913] bond_slave_0: entered promiscuous mode [ 768.014590][T11913] bond_slave_1: entered promiscuous mode [ 768.020464][T11913] bridge0: entered promiscuous mode [ 768.037995][T11905] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 768.080011][T11905] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.1440: iget: bad i_size value: 38620345925642 [ 768.094510][T11913] macvtap2: entered promiscuous mode [ 768.111999][T11913] bond0: entered promiscuous mode [ 768.120961][T11905] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1440: couldn't read orphan inode 15 (err -117) [ 768.139386][T11913] macvtap2: entered allmulticast mode [ 768.149607][T11913] bond0: entered allmulticast mode [ 768.161065][T11913] bond_slave_0: entered allmulticast mode [ 768.177515][T11905] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 768.194068][T11913] bond_slave_1: entered allmulticast mode [ 768.199993][T11913] bridge0: entered allmulticast mode [ 768.207142][T11913] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 768.299667][T11920] bond0: left allmulticast mode [ 768.316314][T11920] bond_slave_0: left allmulticast mode [ 768.326996][ T5793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 768.339532][T11920] bond_slave_1: left allmulticast mode [ 768.351647][T11920] bridge0: left allmulticast mode [ 768.359796][T11920] bond0: left promiscuous mode [ 768.370926][T11920] bond_slave_0: left promiscuous mode [ 768.376468][T11920] bond_slave_1: left promiscuous mode [ 768.382089][T11920] bridge0: left promiscuous mode [ 768.658123][T11926] loop6: detected capacity change from 0 to 128 [ 769.084178][ T5786] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 769.108948][ T11] EXT4-fs error (device loop5): ext4_validate_block_bitmap:430: comm kworker/u4:0: bg 0: block 5: invalid block bitmap [ 769.147006][ T11] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1148 with error 28 [ 769.165875][ T11] EXT4-fs (loop5): This should not happen!! Data will be lost [ 769.165875][ T11] [ 769.178673][ T11] EXT4-fs (loop5): Total free blocks count 0 [ 769.185130][ T11] EXT4-fs (loop5): Free/Dirty block details [ 769.191083][ T11] EXT4-fs (loop5): free_blocks=0 [ 769.196848][ T11] EXT4-fs (loop5): dirty_blocks=1148 [ 769.202176][ T11] EXT4-fs (loop5): Block reservation details [ 769.217990][ T11] EXT4-fs (loop5): i_reserved_data_blocks=1148 [ 769.288620][ T6055] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 769.303962][ T5786] usb 4-1: Using ep0 maxpacket: 16 [ 769.312431][T11928] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 769.319783][T11928] IPv6: NLM_F_CREATE should be set when creating new route [ 769.320362][ T5786] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 769.327087][T11928] IPv6: NLM_F_CREATE should be set when creating new route [ 769.338241][ T5786] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 769.343104][T11928] IPv6: NLM_F_CREATE should be set when creating new route [ 769.368032][ T5786] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 769.421642][ T5786] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 769.448571][ T5786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.479647][ T5786] usb 4-1: Product: syz [ 769.497691][ T5786] usb 4-1: Manufacturer: syz [ 770.343039][ T5786] usb 4-1: SerialNumber: syz [ 770.408988][T11932] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1447'. [ 770.775452][ T5786] usb 4-1: 0:2 : does not exist [ 770.919851][T11938] loop6: detected capacity change from 0 to 32768 [ 770.942330][T11938] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 10 [ 771.081387][ T9793] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 10 [ 771.529339][T11944] loop4: detected capacity change from 0 to 1024 [ 771.540475][T11944] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 771.597557][T11944] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 771.600693][ T5786] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 773.253293][ T5786] usb 4-1: USB disconnect, device number 21 [ 773.369490][ T6013] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 773.834476][T11957] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 774.693186][T11960] loop4: detected capacity change from 0 to 128 [ 774.766332][T11961] Bluetooth: hci0: load_link_keys: too big key_count value 2816 [ 776.838671][T11979] loop5: detected capacity change from 0 to 256 [ 776.918479][T11979] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 776.938303][T11983] loop4: detected capacity change from 0 to 1024 [ 776.984021][T11983] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 777.220159][T11983] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 780.792630][ T6013] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 781.159665][T12005] loop6: detected capacity change from 0 to 128 [ 781.486843][T12014] netlink: 'syz.4.1467': attribute type 3 has an invalid length. [ 781.495000][T12014] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1467'. [ 783.444930][T12023] Bluetooth: hci0: load_link_keys: too big key_count value 2816 [ 784.339864][T12033] loop6: detected capacity change from 0 to 1024 [ 784.383421][T12033] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 784.568241][T12033] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 786.397481][ T6060] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 787.099972][T12050] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1478'. [ 787.347163][T12053] netlink: 'syz.5.1480': attribute type 3 has an invalid length. [ 787.355108][T12053] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1480'. [ 787.567725][T12056] loop4: detected capacity change from 0 to 128 [ 788.295959][T12062] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 788.446386][T12066] loop6: detected capacity change from 0 to 1024 [ 788.483145][T12066] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 788.774845][T12066] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 790.943711][T12077] Bluetooth: hci0: load_link_keys: too big key_count value 2816 [ 791.834009][ T6060] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 792.180806][T12094] netlink: 'syz.6.1493': attribute type 3 has an invalid length. [ 792.189076][T12094] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1493'. [ 792.408644][T12097] loop3: detected capacity change from 0 to 128 [ 793.116326][T12101] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 793.664424][ T5855] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 793.944280][ T5855] usb 4-1: device descriptor read/64, error -71 [ 794.064553][T12114] loop5: detected capacity change from 0 to 1024 [ 794.102291][T12114] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 794.178430][T12114] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 794.234322][ T5855] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 794.403584][ T785] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 795.084410][ T6055] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 795.124096][ T5855] usb 4-1: device descriptor read/64, error -71 [ 795.183717][ T785] usb 5-1: config 0 has an invalid interface number: 247 but max is 0 [ 795.192781][ T785] usb 5-1: config 0 has no interface number 0 [ 795.211854][ T785] usb 5-1: too many endpoints for config 0 interface 247 altsetting 138: 111, using maximum allowed: 30 [ 795.242448][ T785] usb 5-1: config 0 interface 247 altsetting 138 has 0 endpoint descriptors, different from the interface descriptor's value: 111 [ 795.256558][ T5855] usb usb4-port1: attempt power cycle [ 795.275259][ T785] usb 5-1: config 0 interface 247 has no altsetting 0 [ 795.282368][ T785] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 795.316921][ T785] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.344124][ T785] usb 5-1: config 0 descriptor?? [ 795.696684][ T5855] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 795.789593][ T5855] usb 4-1: device descriptor read/8, error -71 [ 795.814192][T12130] Bluetooth: hci0: load_link_keys: too big key_count value 2816 [ 795.849579][ T785] usb 5-1: string descriptor 0 read error: -71 [ 796.010230][ T785] usb 5-1: Cannot read MAC address [ 796.015828][ T785] MOSCHIP usb-ethernet driver: probe of 5-1:0.247 failed with error -71 [ 796.030789][ T785] usb 5-1: USB disconnect, device number 19 [ 796.094183][ T5855] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 796.134673][ T5855] usb 4-1: device descriptor read/8, error -71 [ 796.259292][ T5855] usb usb4-port1: unable to enumerate USB device [ 796.453855][T12133] netlink: 'syz.6.1506': attribute type 3 has an invalid length. [ 796.461874][T12133] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1506'. [ 796.758555][T12137] loop3: detected capacity change from 0 to 128 [ 797.305092][T12139] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 797.312420][T12139] IPv6: NLM_F_CREATE should be set when creating new route [ 797.319879][T12139] IPv6: NLM_F_CREATE should be set when creating new route [ 797.327273][T12139] IPv6: NLM_F_CREATE should be set when creating new route [ 797.429300][T12143] loop3: detected capacity change from 0 to 128 [ 797.457319][T12143] FAT-fs (loop3): Unrecognized mount option "0xffffffffffffffff01777777777777777777777=d̞ YS38`" or missing value [ 797.528757][T12145] loop4: detected capacity change from 0 to 1024 [ 797.546271][T12145] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 797.789515][T12145] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 800.046199][T12164] loop5: detected capacity change from 0 to 256 [ 800.066068][T12164] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 800.546309][ T6013] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 800.920946][T12173] netlink: 'syz.6.1517': attribute type 3 has an invalid length. [ 800.929346][T12173] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1517'. [ 803.570426][T12187] loop5: detected capacity change from 0 to 128 [ 805.417831][T12198] Bluetooth: hci0: load_link_keys: too big key_count value 2816 [ 805.571402][T12209] loop5: detected capacity change from 0 to 1024 [ 805.612432][T12209] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 805.686300][T12209] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 805.733238][T12216] loop6: detected capacity change from 0 to 256 [ 805.758899][T12216] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 806.615514][ T6055] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 808.038755][T12241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1536'. [ 808.061969][T12241] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1536'. [ 808.118432][T12241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1536'. [ 808.128606][T12241] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1536'. [ 808.971400][ T6812] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 808.980122][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.561443][ T6812] usb 6-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 809.625453][ T6812] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.634613][ T6812] usb 6-1: Product: syz [ 809.639676][ T6812] usb 6-1: Manufacturer: syz [ 809.644491][ T6812] usb 6-1: SerialNumber: syz [ 809.692956][ T6812] usb 6-1: config 0 descriptor?? [ 810.339704][T12246] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1538'. [ 810.381553][T12261] Bluetooth: hci0: load_link_keys: too big key_count value 2816 [ 810.436820][T12246] bond_slave_0: entered promiscuous mode [ 810.442620][T12246] bond_slave_1: entered promiscuous mode [ 810.449674][T12246] macvtap1: entered promiscuous mode [ 810.455163][T12246] bond0: entered promiscuous mode [ 810.461079][T12246] macvtap1: entered allmulticast mode [ 810.481643][T12246] bond0: entered allmulticast mode [ 810.511028][T12246] bond_slave_0: entered allmulticast mode [ 810.527677][T12246] bond_slave_1: entered allmulticast mode [ 810.554924][T12246] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 810.595925][T12262] bond0: left allmulticast mode [ 810.607518][T12262] bond_slave_0: left allmulticast mode [ 810.615637][T12262] bond_slave_1: left allmulticast mode [ 810.621251][T12262] bond0: left promiscuous mode [ 810.802780][T12262] bond_slave_0: left promiscuous mode [ 810.808421][T12262] bond_slave_1: left promiscuous mode [ 811.079383][ T6812] cx82310_eth: probe of 6-1:0.0 failed with error -22 [ 811.092315][ T6812] cxacru 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 811.110451][ T6812] usb 6-1: USB disconnect, device number 19 [ 813.487674][T12288] loop3: detected capacity change from 0 to 128 [ 814.697277][T12298] netlink: 'syz.6.1550': attribute type 3 has an invalid length. [ 814.705755][T12298] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1550'. [ 817.573207][T12330] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1560'. [ 817.585442][T12330] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1560'. [ 817.596453][T12330] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1560'. [ 817.607200][T12330] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1560'. [ 820.164156][ T5101] Bluetooth: hci3: command 0x0406 tx timeout [ 823.409812][T12387] Bluetooth: hci0: load_link_keys: too big key_count value 2816 [ 825.191399][T12395] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1579'. [ 826.724695][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 827.036123][ T9] usb 5-1: config 0 has no interfaces? [ 827.069704][ T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 827.140858][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.195624][ T9] usb 5-1: config 0 descriptor?? [ 828.045121][ T5786] usb 5-1: USB disconnect, device number 20 [ 828.908928][T12421] loop4: detected capacity change from 0 to 512 [ 828.932397][T12421] EXT4-fs: Ignoring removed nobh option [ 828.956519][T12421] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 829.238901][T12421] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.1588: iget: bad i_size value: 38620345925642 [ 829.284505][T12421] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1588: couldn't read orphan inode 15 (err -117) [ 829.357869][T12421] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 831.449490][ T3469] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm kworker/u4:8: bg 0: block 5: invalid block bitmap [ 831.478437][ T3469] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1772 with error 28 [ 831.492028][ T3469] EXT4-fs (loop4): This should not happen!! Data will be lost [ 831.492028][ T3469] [ 831.502295][ T3469] EXT4-fs (loop4): Total free blocks count 0 [ 831.508757][ T3469] EXT4-fs (loop4): Free/Dirty block details [ 831.517344][ T3469] EXT4-fs (loop4): free_blocks=0 [ 831.522425][ T3469] EXT4-fs (loop4): dirty_blocks=1772 [ 831.528142][ T3469] EXT4-fs (loop4): Block reservation details [ 831.535555][ T3469] EXT4-fs (loop4): i_reserved_data_blocks=1772 [ 831.627168][ T6013] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 832.099014][T12445] loop4: detected capacity change from 0 to 32768 [ 832.106330][T12445] XFS: ikeep mount option is deprecated. [ 832.153181][T12445] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 832.279063][T12445] XFS (loop4): Ending clean mount [ 832.287062][T12445] XFS (loop4): Quotacheck needed: Please wait. [ 832.409891][T12445] XFS (loop4): Quotacheck: Done. [ 833.190315][ T6013] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 835.754922][T12473] : renamed from bridge_slave_0 (while UP) [ 835.846380][T12479] capability: warning: `syz.6.1602' uses 32-bit capabilities (legacy support in use) [ 835.908246][T12479] loop6: detected capacity change from 0 to 64 [ 836.219663][T12479] hfs: unable to locate alternate MDB [ 836.226040][T12479] hfs: continuing without an alternate MDB [ 836.354023][T12479] hfs: request for non-existent node 293 in B*Tree [ 836.404441][T12479] hfs: request for non-existent node 293 in B*Tree [ 836.441148][T12479] hfs: get root inode failed [ 838.291192][T12513] tipc: Enabling of bearer rejected, failed to enable media [ 838.313903][T12511] loop5: detected capacity change from 0 to 64 [ 838.594113][T12511] hfs: unable to locate alternate MDB [ 838.644552][T12511] hfs: continuing without an alternate MDB [ 838.696976][T12511] hfs: request for non-existent node 293 in B*Tree [ 838.749822][T12511] hfs: request for non-existent node 293 in B*Tree [ 839.715634][T12511] hfs: get root inode failed [ 845.028471][T12571] tipc: Enabling of bearer rejected, failed to enable media [ 845.351429][T12587] netlink: 'syz.5.1626': attribute type 6 has an invalid length. [ 845.944087][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 850.529350][T12620] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1636'. [ 851.712496][T12632] tipc: Enabling of bearer rejected, failed to enable media [ 851.862627][T12639] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1639'. [ 854.868538][T12664] loop5: detected capacity change from 0 to 512 [ 854.933265][T12664] EXT4-fs: Ignoring removed nobh option [ 854.980751][T12664] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 855.192130][T12664] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.1642: iget: bad i_size value: 38620345925642 [ 855.259381][T12664] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1642: couldn't read orphan inode 15 (err -117) [ 855.356806][T12664] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 855.403749][T12674] loop6: detected capacity change from 0 to 32768 [ 855.411768][T12674] XFS: ikeep mount option is deprecated. [ 855.435572][T12674] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 855.810515][T12674] XFS (loop6): Ending clean mount [ 855.821708][T12674] XFS (loop6): Quotacheck needed: Please wait. [ 855.886167][ T7433] EXT4-fs error (device loop5): ext4_validate_block_bitmap:430: comm kworker/u4:13: bg 0: block 5: invalid block bitmap [ 855.970845][ T7433] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 252 with error 28 [ 855.984819][ T7433] EXT4-fs (loop5): This should not happen!! Data will be lost [ 855.984819][ T7433] [ 855.995179][ T7433] EXT4-fs (loop5): Total free blocks count 0 [ 856.001474][ T7433] EXT4-fs (loop5): Free/Dirty block details [ 856.023921][ T7433] EXT4-fs (loop5): free_blocks=0 [ 856.029049][ T7433] EXT4-fs (loop5): dirty_blocks=252 [ 856.061128][ T7433] EXT4-fs (loop5): Block reservation details [ 856.074024][ T7433] EXT4-fs (loop5): i_reserved_data_blocks=252 [ 856.105573][T12674] XFS (loop6): Quotacheck: Done. [ 856.150318][ T6055] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 857.784634][ T6060] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 857.874491][ T6812] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 858.071530][ T6812] usb 6-1: device descriptor read/64, error -71 [ 858.354058][ T6812] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 858.734732][ T6812] usb 6-1: device descriptor read/64, error -71 [ 858.865650][ T6812] usb usb6-port1: attempt power cycle [ 860.047934][ T6812] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 860.228634][T12714] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 860.263060][T12714] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.445968][T12707] bridge0: port 3(syz_tun) entered disabled state [ 860.560907][T12707] syz_tun (unregistering): left allmulticast mode [ 860.574485][T12707] syz_tun (unregistering): left promiscuous mode [ 860.584522][T12707] bridge0: port 3(syz_tun) entered disabled state [ 860.722661][T12714] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 860.734890][T12714] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.859243][T12711] syz_tun (unregistering): left allmulticast mode [ 860.895102][T12714] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 860.905823][T12714] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.988083][T12714] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 860.997961][ T6812] usb 6-1: device descriptor read/8, error -71 [ 860.998550][T12714] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.196803][T12714] tipc: Left network mode [ 862.369762][T12714] hsr_slave_0: left promiscuous mode [ 862.377453][T12714] hsr_slave_1: left promiscuous mode [ 862.383768][T12714] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 862.397780][T12714] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 862.411751][T12714] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 862.423471][T12714] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 862.437833][T12714] bridge_slave_1: left allmulticast mode [ 862.443565][T12714] bridge_slave_1: left promiscuous mode [ 862.451344][T12714] bridge0: port 2(bridge_slave_1) entered disabled state [ 862.468210][T12714] : left allmulticast mode [ 862.472796][T12714] : left promiscuous mode [ 862.480635][T12714] bridge0: port 1() entered disabled state [ 862.547245][T12714] veth1_macvtap: left promiscuous mode [ 862.552889][T12714] veth0_macvtap: left promiscuous mode [ 862.558763][T12714] veth1_vlan: left promiscuous mode [ 862.565463][T12714] veth0_vlan: left promiscuous mode [ 863.312820][T12714] team0 (unregistering): Port device team_slave_1 removed [ 863.369363][T12714] team0 (unregistering): Port device team_slave_0 removed [ 863.425077][T12714] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 863.485683][T12714] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 863.726401][T12714] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 864.079022][T12714] bond0 (unregistering): Released all slaves [ 864.811732][T12714] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 864.823444][T12714] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.919288][T12714] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 864.932116][T12714] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.000213][T12714] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 865.014430][T12714] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.108856][T12714] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 865.120559][T12714] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.419326][T12714] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 865.431183][T12714] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.517449][T12714] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 865.532701][T12714] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.628499][T12714] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 865.641819][T12714] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.718406][T12714] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 865.728799][T12714] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.984354][T12714] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 865.998538][T12714] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.070814][T12714] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 866.081806][T12714] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.149104][T12714] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 866.159497][T12714] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.227424][T12714] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 866.238026][T12714] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0