last executing test programs: 18.18861868s ago: executing program 0 (id=644): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xc2, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080"], 0x24}}, 0x0) 18.031669903s ago: executing program 0 (id=645): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = add_key$fscrypt_v1(0x0, &(0x7f0000000480)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x39, 0x0, 0x6b]}, &(0x7f00000004c0)={0x0, "3e06000000000000005ec82d4ee9df60f6ae1dfbea2c118ff9b3a3b132e4fde10e2600b0950b0477e801fc8a1be9b4ebbe9c22a8a2b0aa00"}, 0x48, 0xfffffffffffffffe) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$setlease(r2, 0x400, 0x1) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r6, &(0x7f0000000280)={0x1, @remote_oob_ext_data_reply={{0x445, 0x46}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, "f38added437dd72297993768b63f2a8a", "a27fde8586236bcadd86dd7b660a3dae", "5bb94f4e09e225d2005f7e9884bfae0b", "bd7f57b7cd4b60572ec9e8a4d2cde59f"}}}, 0x4a) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r7, 0x4c80, 0x7000000) keyctl$update(0x2, r1, &(0x7f0000000040)="b8", 0x1) 16.900560065s ago: executing program 0 (id=647): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc, 0x4}, {0xffff, 0xffff}, {0x0, 0x10}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x3c, 0x2c, 0xd27, 0x40, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xb}, {}, {0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xfff1, 0x9}}]}}]}, 0x3c}}, 0x0) r1 = open(&(0x7f0000000000)='./file2\x00', 0x109042, 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000280)='=', 0xfdef}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 14.472988292s ago: executing program 0 (id=652): fanotify_init(0x200, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000140)=0x4) 10.632586945s ago: executing program 1 (id=660): bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="060000000400", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x20000050) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffb) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", "037ec42b", '\x00', "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386a7a0236a9cc1f0", "cf6cce2296b3f853e224c4e0"]}) 9.527530216s ago: executing program 1 (id=662): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc, 0x4}, {0xffff, 0xffff}, {0x0, 0x10}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x3c, 0x2c, 0xd27, 0x40, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xb}, {}, {0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xfff1, 0x9}}]}}]}, 0x3c}}, 0x0) r1 = open(&(0x7f0000000000)='./file2\x00', 0x109042, 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000280)='=', 0xfdef}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 9.072357495s ago: executing program 0 (id=664): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000a00)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000600)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.31338834s ago: executing program 1 (id=665): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x94, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0xc4142, 0x0) r1 = open(&(0x7f0000000180)='./file1\x00', 0x185102, 0x2b) sendfile(r0, r1, 0x0, 0x1000000201001) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x28042, 0x0) 8.3039806s ago: executing program 2 (id=666): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x10100d1, &(0x7f00000000c0), 0x5, 0x546, &(0x7f0000000180)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000140)='./file2\x00', 0x1a4a438, &(0x7f0000001240)=ANY=[@ANYBLOB="a1990e4e16254dae19d204a70312892eb2426bc182ebbacbe162555e5a952f0b849d44201f318feee919fe1eb8a984eeeed69b44747776c3d3730aeadcee12ebb3d1f340f9f617419b244b164de0354b015fcabce0cddb718b1824098ddcdddd104a1d4cc1b65facb010d8438ddf90c928981fcb23c348f37f97d1d12085ceeb21af0bff8e3db2d50c", @ANYRES16, @ANYBLOB="e63370d29dcdc57fc32d2ff516a3bb949038b1947bfbd85401d027dd86424b356f2ee174e68472c557548f288cc4c9fb9381081d730948cc091c2ab3bdc63b89b0bfc6865fc09442d90cefe19901d4706564bdfbc15919ce4516688e279f718c9cd65b023ddcbd318e555ad83946998924faafc5e1d48457e8c88d5f51bfd00c511dd6ff9dcb0ec83fe2f397df1efb5178d87cf96abe35deac8342f1cc799b36b70035e96c0c0ed91d02203316675997d6085e76975aa1505b80ede117f61624c09fb5abd303c71d2310f482183363b500ba27da0d91ca8c8d9eabace24af5c73fd26d54d430f38422990b1fd5b147c5e67e4688bc1d918b1bab0aa2ec1445f5dde3db21312b122e9d0d9e3451bca2c6474a438a307e27bf67317aaf33f381d6cd3c1754485c95bc4a78db7f4cfb3a3654249744dad5765800982ef28c13cbc43d5e4a7d640a0382b1fb7de7b1630a23be1ccbd2660343274939f54647f1306df56e47da413ff222a818fbb1d5e267c89ff166a4540c49419941fa699b30af4ebaf6aeff495600a14fe98a3c63ebb62a779367d7d7b678c0dd907b25b54cc88966cfd006aceb3e140960f0623f8a36bbf65d1773a35c56e09e95e8ade749422d1cd30665f022e442e969ce040765a530f6c447b8be5c327a5f8ed2766ed3fe45185518826f3c9c4f29d1bfcbdd7138dfe03ef026fd591fe25bbedd80964b751a38f1682276ce09455d0eec03980456e01928f929026676138d67c97f022c2d2ddf6c54d0670e5c380a847e3b6592a032e6a57fa533d925bd546a44ff4394eebace25f5b8caa8c197080c97bc303ee9d8aac47b6d68978413c3bedcd8547e71f1572eee699f2b830754792f0cea0385c0a5a702c2d51994f4f3cff582f32017d6f781664c29c6d1a096286a872e642b42cfc3142108922309bd7a9c48039f7466ea3d19c7986bf951cdcc71152689bd2eee23ca9260c6ba832b72ef1702b016d292525f5450608de536f96e22f380d26728cb99e839757acc0b77c820c3d871f74ecdc3e584cd25715c5225b1956924771e944e8341a51b48d36cc28b4479a7efe015285d330b323de47bf1f4e7efe24b239767007d181e64c54bf003faaf28177fced4cc2cca84992482e9e2b366e22de706466161329ae9d6b63060855b59df0454fa54d5275d485660891ab18a5ad53814aeb1d65b34dc4312ae83d17534c6bb85e6ad987bc5212062f32d94f645b83b9ab91fe7c7eaea39ce2962006bd953fdbdfb4b1f6ad5df6dcf4f417d2d576cfb8fc541229f1fd139c41bf79bfa2868a11941782c0c14d5043b614dac0dc23383b60f80cbdc92438ac313b80656f6b29c35fe0bd252e8629b2723c4f96a79b6c4f9f7b36099a2272731620a52a3ce8d5dd6cae33f3a16c9b596b32c0b7902e88bb6a49b9cfc8d0201d878dbfe5df38b46ef9afb6f7fb924a9c3ce02157b359e4cf789ccb98aecd1d3cd28d83d291dff1f2afc5823615b08ce944ff769a0e01edbc78793295e45e428f6f957b5b2acfa830088b69efe81c3bb95810ed1bd3b391ef47bf7adf509b90634e0206627a592c6a1372580dfa191ea3016468828554defb5aee9140f8f5388eae1f55ac22324258f6a202d43fff46fb7098ff4a09dbff97d622e2444272949b2cf93d66ce82591f0478fe9e33727ddd0814b3684d2d32d1d86a910b01fd893e113b6cc1dfe1961721fafab4ee4e7bdb9cffdbc8c179c599ff8d3246747dc3291a916e5114071382a45207a313a385091b8916f7ee69d5071f8d3756243d44452deb7cb80e0ed26a57d3d06964d5bcf72ee9f65bb8ce2af1081fac12903e49699dbd1b22c4ec8f0ac4cda2c476f23ca42ef1c59109145cab81236cd9d2e667f97b412cfda972eec9fac0b604fd0a2374ea88ec1d929ca8fd184c95cb947542f7e21c58879ad1b4f4651ae03df32ee35f729c8104972c92a2da1b43d9e4467dcda3411f6b03fd51cc482dbb398a9b3d672cc945c3cf00b2a6cf0cc52c72dd6aaa0188fea4e80a114f3d13855828c7e8ad2cc811e304220393fa21eeb1ebf7b3a8b5453c16a4b8e5913ca1f25d6d13f3a860fa8ac11d53ab31a92077796381db5e61bd06995e0155955ea173efa46b5ac81d227443c7e3b00fd6b68c0990373fd6b89538b98e787b791ea24df8a37480fa5a08ac48db364a33625481a99d9d81ee22bf5f65b6e2817ad1b544daa8b9f0bb95ed53b2ce312c1e860ac73cf6e97542d4c42bf279dee1c959c5170e367e4fd33c3bf8cd2c323e4903a4808ee51d17baf29a6ecb5656fb929cdf34915def018fe803741bd18fa12d9120b39efb005bb5dd067f22d4892f32785c51698a712fb2cd29db1d6cf1b9ca358ac3af87dd1aacfca82460836730cb3238fcbd48be86c2baeea4c26879e968feb7e2d5f3b93b36bf332a8c4c308c1706423fd8dafaaab50d2dc7c16b73a4308fdde2eb42a5a2a1b7c696ad035fbc91e3bbf4b768ba8d5bf7510700655d992bb830e5c66238f677c15a9942c620f2c478d554bf8c0e0447fb7bfd85e6b14a43d3bfad4fe62ca29235c6ca7c3a714d6c3e5d096fe809692ede0e7820df7c8c8108140bb9587bd30b5d043e77c9d1b3d0709dadeae07be280dbebcc0a5c5ee5f146811b3b3b8ab36dbeb8f3f6dbfeac861ce41de56492144694e8e627897147f3b248e1c4cfa748af3cf33638f8609a65eb33f52a8127b47ab7a29778373124a055d536344ff27a9b03fa2784904bbbb48afb8fb0a9bb420535d8c5c6fd2c545907d7f481229bb678df13764fa41d7e5e83eef5e5f4d708bdc33037b1b8ded366325a2c241f48c84df62c98cbcecd4ffc6e3b077d86800ccf7b0d9a55adc6068baeb8e87784d3648ed4e605ef1a869cd63f4d990e9e5ad6234fd33d9d64d9c4fcf6679730b73fb6c98d2782923ecc4286f5d61d1a63e9d5139cb087e7dfd5b2f69ca5c67cf1c367dadbd497d6222511db227bf3a024a333f03dd158065b79d19a96fca73e221042ab2614a54a72d7c804a38479ceafcc851d766af1df3d16220eda9e8dab72e6703705e44ead1a1afc29b907239a8eb052ee8c90b5f47a248f1070b260ec14067a894ed3a5115728fa7e657cd37ca29fc5b6d6fcb743c6ce84cf690b8a64ddb16634af94a41c1df8cef1284c695260341b9e7c433f57cf453b0f8f377df0f6508ce5b442631c3ad8014bc283c3a6954efb9577c149f5cd7887757721da9f4a912d09679f7e1dccde8138b4ab6621361b962f7d89b86e6903ff9b9e22138cc7c98185667a5f79cdf0f0db4f2630623b51f4b3f754f8ee15d30cc254d8b15fb0069b8cda236d8b379c77a6b2815d3f277f1f6f2be2e50d33cb50da1c184255e91b2af54ac7142e275e4e5a7febbc234c26683e17139a8c0bbd1babc440d46ffb526ebad440d73c407a82606be40e65b4ec054e458e152e29a69bf43db4b07c0651cbbff2cb087fd63df4ffbe1ead4168069746750ade01603d2a310f80b81ef7660d746fcaf393426354a1a376f0eef6e207fb2d95cc2d9d65ec814a1a0138f9b8d35891b28c27b859bb263384620f28aadb44885bbaaa4d6f886710f8b813990fe9ff8f9f55da41792d127106d2744a8ca652e22d567b4a21279900a92c98bcec847542e3c96c7bd752737a84181853d07754c59e2c0848916723256b4a5fab03afeae08020b7bb55df6b0d6c5647dfbcc6069a74890b413e18265f9b08e2028bfdf45531c1ff83d0918017a526d0a0cf4e7ac8785488f7fc4b44b2072c6362f2ffe56599b5c9584e441171d15b3849c065fb7b6c28b701f3712f063260f0392cb6e122dd5437533b71ce702154d52f4a41f9814ac153f9a7c89bfc555ccf61aaa1bd5b2a4540d93841cdc5795f57db7c7373ef519a20b974723f30312273d567290def7c32e648898f95886da48ff95ca75fe947a7064c377a2bd8a470760593341a183d6d01c337edfde3e4656aa36eb6c0fc46e31ca8c638962dfb6ba035a0c145f78649746419225fd57a0b9cccd88b00b8723b88a1b6e6e1baf8750e78e0b63b9738aa66d059ed29b6e911efaea69927bc2a85ee3042db568cd7fba0d90cb63da6189255e9d276ccc1c5bc4efd98bb6b7e1d902af3836c2fb23b31eeaa2254a4e527e22289e8c79a6af27967c567b6e74a5e87cbac651098ea33311b4ed55d402ed8e76043899a33b06361887f588be2c417da97f2a4059dd6c2774df05a4f8cc0a578f8b238023887a88898e5c9e8b8c0f5a6410df4e4161e99d94aba3a3757c4c68deaab4bd4de234ea6e75feab56e8bf4aa6c8cd48dcd5a48e9bae1b50c9a1ae1c78d344137284a75f5d87c9ce9b914e63edd4eed78ed7e9bf36cc0a0e3268bffda25700d67ec0d1eea62923dabfedbc3a3d6da509a6c69d6b2f545a0212cb34499f3e26ced1a661d079db944254e8751d2e7c668b0fe226efcaaff889618b701f4c7675d554c5d6f5c463d7f6f986afc83ec77116b8775fe5e792b820dfe4f477a1c0255f6e6b3ca4385cf21871a4301303ab3e11becf5b552146b754297777b1633218bc01df5407b10c814ebf7b4a7e438ae6baff9ceb94574146d4ce11496176e6884342d32fd93280d4ec51805153e60e4fd8cb44fa41bfb9be5bf5e5286bf0e9f420655f779d2231b2035b2b3fd7d9fde2c6aeb00843ed00416cbe83be03bfda7fe92fdeeaf1e18f523be9de4ec45b124fcdd237d974557832e4a44d36a37181590bb3e66ddf3dee94424c278262093a9e23ca81d3f82bfd9bb3b9b7b1ea9ec6069e612da1e66ac41ecf00a746a4ae62b5c98b5bee6830d20ed6e4d8be463a62fb456a4e297d9a019a649925faa1ead9d9fe37347c91f91f70ec5672ea460f7f5996130f1718b2b41b682c6608ac02bd2e937a1df28c8cc76755d1e52ed781084911ac2d60794f0baf49d0eb1fd594675fcd25cf5f0e1542d8e42820056fdde1b152871bf8af8431ccfd8cafeb4b10ae1d4b3e65864ec4d5a51e3aa3fe747b859ac97f7b6b90bd15342dd09bcea526b63bfeaf099288511086870548bab5dc11978501b4e720cae289009900016782ea1bd9c79c065ed1e6344b07f335de4f7f9273564cbf6303b216bd71b3a89bb451cf9a6c9c84028ae0910abe9890600dbdf7ec05fe6b416e29a8f19c780157b26c0ee27305bb3c948615e871afc3be77f375274d33ba4bf0faa1aa68333bac1a2939891c530e5f4aa40fcccd58239cf9eab057bf092222ba1dfa2fd912ac28b4b489005db17a476c0cb62d3461b0a7eb288b003adcee6b68210abc3d47025d54e79459f3d31c2b28489510d4400b6c4b0a3db492fbc52471ed38d26bd7e943374ef769cae601df423c51abe181268d0c360e8bb67b0abfaab7ed16c36bb7011fb9965998dad08cd7756a5ea5474c31d73e733ddd04104495d35e450250c7fe40c2cc9622ed493e6211b75812e261774e0b2d5dacf77538dfa5d285cb59461ced9f575eb7508e7f1cc10e0ba39a1f9885a87234f9e339a7333ce4ec35fe706a5ef084a69c0d425842b09667755a7bc13232563ec15ef79ccce7c1fec6c0741ed1c7c1485e27a710c322df45f79ed6ad2d7434ec708a324b4ddfe65bf450bb2cd7980e7ad992024e1f55d0b3e78afd4beeba53eb2dfe98e50c8bdcb7d47b055e0aa0f2175b28441e3e77f7ee94fc8d3cc04f2cfea71d50b62cc3ac2f36cee2f645250975e90e8cbe43e1d98e44551ef9c291e50b79e2feb3935ea57e12ea2e294a3bca89a9a9079687120cbffcf142380a69ca43", @ANYRES64], 0xc, 0x0, &(0x7f0000000000)) 7.719044281s ago: executing program 2 (id=668): syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0x10, 0x2, 0x0) r3 = creat(&(0x7f00000016c0)='./file0\x00', 0x40) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r4}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001a40)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f000062d000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0, r3}, 0x68) 7.717885131s ago: executing program 1 (id=669): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x122) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000040)='./bus\x00', 0x34) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) sysinfo(&(0x7f0000000000)=""/196) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) fcntl$notify(r1, 0x402, 0x91ea6c1af182532) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) close_range(r4, 0xffffffffffffffff, 0x0) 4.952768834s ago: executing program 2 (id=671): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0, 0x0, 0xffffffffffffffff}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(r1, &(0x7f0000019340)='net/snmp6\x00') pread64(r4, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 4.880385446s ago: executing program 1 (id=672): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000040)=0x33a3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) execve(0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$vivid(&(0x7f0000000180), 0x1, 0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x3, 0x3c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x622, &(0x7f00000000c0)={0x0, 0x3f2f, 0x80, 0x3, 0xf0}, &(0x7f0000000140), &(0x7f0000000180)) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {0x20000}, {0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7fff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xffff05f0}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x80}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 4.309369097s ago: executing program 3 (id=673): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r3, 0x7b2, &(0x7f0000001680)={0x0, 0x1}) 3.244338087s ago: executing program 0 (id=674): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf22"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, &(0x7f0000002080)={0xfc, {"a2e3ad09ed0d09f91b5e071887f70e09d038e7ff7fc6e5539b0d410a8b089b3f363563030890e0879b0af8c6e70a9b336c959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0xfed6}}, 0x1006) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000740)=ANY=[]) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) 3.226641678s ago: executing program 1 (id=675): fanotify_init(0x200, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000140)=0x4) 3.09295061s ago: executing program 3 (id=676): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000002100)=ANY=[@ANYBLOB="13000000190037d028bd7000fedbdf251d01020015000400030000e004000000c0bc6bbcf086168b04000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8045}, 0x40000) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)=0x0) syz_open_procfs(r2, &(0x7f0000000040)='net/connector\x00') ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x1, 0x0, 0x2, 'syz0\x00', 0x1}, 0x6, 0x100, 0x5, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) r3 = gettid() r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r4, 0x0, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x9, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) unshare(0xc000680) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/mnt\x00') syz_clone(0xb41a0400, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(0x0, 0x0, 0x0, &(0x7f0000001180), &(0x7f0000000000), 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26}, 0x28) 2.924994093s ago: executing program 3 (id=677): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) add_key$user(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffd) unshare(0x4020400) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'lblc\x00', 0x1, 0xa7e, 0x1a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x0, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xcd}}, 0x44) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lblc\x00', 0x5, 0x8, 0x11}, {@remote, 0x4e1d, 0x3}}, 0x44) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.907432203s ago: executing program 3 (id=678): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) add_key$user(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffd) unshare(0x4020400) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'lblc\x00', 0x1, 0xa7e, 0x1a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x0, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xcd}}, 0x44) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lblc\x00', 0x5, 0x8, 0x11}, {@remote, 0x4e1d, 0x3}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.826425955s ago: executing program 3 (id=679): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() syz_open_dev$video4linux(&(0x7f0000001380), 0x20000000000000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc, 0x4}, {0xffff, 0xffff}, {0x0, 0x10}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x3c, 0x2c, 0xd27, 0x40, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xb}, {}, {0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xfff1, 0x9}}]}}]}, 0x3c}}, 0x0) r0 = open(&(0x7f0000000000)='./file2\x00', 0x109042, 0x0) pwritev(r0, &(0x7f0000000540)=[{&(0x7f0000000280)='=', 0xfdef}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 1.597615449s ago: executing program 2 (id=680): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x122) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000040)='./bus\x00', 0x34) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) sysinfo(&(0x7f0000000000)=""/196) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) fcntl$notify(r1, 0x402, 0x91ea6c1af182532) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) close_range(r4, 0xffffffffffffffff, 0x0) 673.343527ms ago: executing program 2 (id=681): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) recvmsg(r0, &(0x7f0000000180)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/51, 0x33}, {&(0x7f0000000100)=""/13, 0xd}], 0x2, &(0x7f0000000240)=""/134, 0x86}, 0x2001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) r2 = syz_open_dev$I2C(&(0x7f0000000380), 0x400, 0xa0c00) ioctl$I2C_TIMEOUT(r2, 0x705, 0xfffffffffffffffb) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) fanotify_init(0xf00, 0x1000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 373.354903ms ago: executing program 3 (id=682): syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000094c0)='./file1\x00', 0x0, &(0x7f0000001940)=ANY=[], 0x1, 0xc25, &(0x7f0000002580)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000901, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x80) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_SET_MSRS(r4, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYRES64=r1, @ANYRES64]) 0s ago: executing program 2 (id=683): bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="060000000400", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x20000050) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffb) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", "037ec42b", '\x00', "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386a7a0236a9cc1f0", "cf6cce2296b3f853e224c4e0"]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.148' (ED25519) to the list of known hosts. syzkaller login: [ 89.662497][ T5779] cgroup: Unknown subsys name 'net' [ 89.804130][ T5779] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.588105][ T5779] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 93.406620][ T5792] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.417645][ T5792] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.427320][ T5792] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.440079][ T5792] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.451162][ T5792] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 93.463651][ T5796] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.474506][ T5798] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.485002][ T5798] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.494608][ T5798] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.504656][ T5798] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.513092][ T5798] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 93.521027][ T5798] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.534728][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.553570][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.564061][ T5802] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.573569][ T5802] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.586074][ T5802] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.598238][ T5105] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.607020][ T5105] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 93.615288][ T5802] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.624824][ T5105] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.634874][ T5105] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.644984][ T5802] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 93.657842][ T5792] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.298868][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 94.315716][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 94.353134][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 94.481237][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 94.621894][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.629759][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.638088][ T5795] bridge_slave_0: entered allmulticast mode [ 94.646805][ T5795] bridge_slave_0: entered promiscuous mode [ 94.658079][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.665757][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.674706][ T5795] bridge_slave_1: entered allmulticast mode [ 94.682846][ T5795] bridge_slave_1: entered promiscuous mode [ 94.691696][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.699448][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.707208][ T5793] bridge_slave_0: entered allmulticast mode [ 94.714832][ T5793] bridge_slave_0: entered promiscuous mode [ 94.767602][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.775983][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.784740][ T5793] bridge_slave_1: entered allmulticast mode [ 94.793737][ T5793] bridge_slave_1: entered promiscuous mode [ 94.816307][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.824800][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.832200][ T5789] bridge_slave_0: entered allmulticast mode [ 94.840862][ T5789] bridge_slave_0: entered promiscuous mode [ 94.891932][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.900405][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.910286][ T5789] bridge_slave_1: entered allmulticast mode [ 94.918758][ T5789] bridge_slave_1: entered promiscuous mode [ 94.955389][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.992715][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.001007][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.009807][ T5794] bridge_slave_0: entered allmulticast mode [ 95.019672][ T5794] bridge_slave_0: entered promiscuous mode [ 95.032545][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.066156][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.080464][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.091883][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.099822][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.107898][ T5794] bridge_slave_1: entered allmulticast mode [ 95.115624][ T5794] bridge_slave_1: entered promiscuous mode [ 95.138817][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.156149][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.184839][ T5795] team0: Port device team_slave_0 added [ 95.197165][ T5795] team0: Port device team_slave_1 added [ 95.292699][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.308296][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.336862][ T5793] team0: Port device team_slave_0 added [ 95.347695][ T5789] team0: Port device team_slave_0 added [ 95.358197][ T5789] team0: Port device team_slave_1 added [ 95.393091][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.401196][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.430936][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.449719][ T5793] team0: Port device team_slave_1 added [ 95.490952][ T5794] team0: Port device team_slave_0 added [ 95.498820][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.506444][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.534745][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.595955][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.604924][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.633160][ T5792] Bluetooth: hci2: command tx timeout [ 95.639632][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.639813][ T5792] Bluetooth: hci0: command tx timeout [ 95.653514][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.665614][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.693930][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.705135][ T5792] Bluetooth: hci3: command tx timeout [ 95.705457][ T5792] Bluetooth: hci1: command tx timeout [ 95.716184][ T5794] team0: Port device team_slave_1 added [ 95.751274][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.758787][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.786768][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.805446][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.812819][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.840434][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.869445][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.877079][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.905298][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.919282][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.926713][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.954074][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.992581][ T5795] hsr_slave_0: entered promiscuous mode [ 96.000796][ T5795] hsr_slave_1: entered promiscuous mode [ 96.110479][ T5793] hsr_slave_0: entered promiscuous mode [ 96.118960][ T5793] hsr_slave_1: entered promiscuous mode [ 96.126683][ T5793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.136894][ T5793] Cannot create hsr debugfs directory [ 96.162609][ T5789] hsr_slave_0: entered promiscuous mode [ 96.169665][ T5789] hsr_slave_1: entered promiscuous mode [ 96.177384][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.186548][ T5789] Cannot create hsr debugfs directory [ 96.200668][ T5794] hsr_slave_0: entered promiscuous mode [ 96.209824][ T5794] hsr_slave_1: entered promiscuous mode [ 96.218011][ T5794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.227289][ T5794] Cannot create hsr debugfs directory [ 96.742126][ T5793] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.760417][ T5793] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.772168][ T5793] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.787709][ T5793] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.882321][ T5794] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.911715][ T5794] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.930020][ T5794] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.942421][ T5794] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.054451][ T5789] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.070605][ T5789] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.105909][ T5789] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.121701][ T5789] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 97.180622][ T5795] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.206682][ T5795] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.218924][ T5795] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.251193][ T5795] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.310885][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.390498][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.445654][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.453864][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.475395][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.484221][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.500634][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.575629][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.616658][ T2895] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.624358][ T2895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.657614][ T5793] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.679630][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.687126][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.704707][ T5792] Bluetooth: hci2: command tx timeout [ 97.704721][ T5796] Bluetooth: hci0: command tx timeout [ 97.772436][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.783581][ T5792] Bluetooth: hci1: command tx timeout [ 97.784208][ T5796] Bluetooth: hci3: command tx timeout [ 97.802608][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.861242][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.920727][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.957503][ T2905] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.966223][ T2905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.032637][ T2905] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.040563][ T2905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.052674][ T2905] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.060649][ T2905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.077651][ T2905] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.084947][ T2905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.136330][ T8] cfg80211: failed to load regulatory.db [ 98.238988][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.440740][ T5793] veth0_vlan: entered promiscuous mode [ 98.487789][ T5793] veth1_vlan: entered promiscuous mode [ 98.631846][ T5793] veth0_macvtap: entered promiscuous mode [ 98.686884][ T5793] veth1_macvtap: entered promiscuous mode [ 98.743149][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.782644][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.806915][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.822431][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.850168][ T5793] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.861332][ T5793] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.870981][ T5793] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.880216][ T5793] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.936975][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.082386][ T5794] veth0_vlan: entered promiscuous mode [ 99.122316][ T5794] veth1_vlan: entered promiscuous mode [ 99.136808][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.142596][ T5789] veth0_vlan: entered promiscuous mode [ 99.150437][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.212882][ T5795] veth0_vlan: entered promiscuous mode [ 99.239275][ T5789] veth1_vlan: entered promiscuous mode [ 99.261878][ T5795] veth1_vlan: entered promiscuous mode [ 99.300446][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.324351][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.348905][ T5794] veth0_macvtap: entered promiscuous mode [ 99.381647][ T5794] veth1_macvtap: entered promiscuous mode [ 99.405584][ T5789] veth0_macvtap: entered promiscuous mode [ 99.418712][ T5795] veth0_macvtap: entered promiscuous mode [ 99.437306][ T5789] veth1_macvtap: entered promiscuous mode [ 99.457182][ T5795] veth1_macvtap: entered promiscuous mode [ 99.498520][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.510798][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.526682][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.593107][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.616905][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.644127][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.658149][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.672531][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.685983][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.698166][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.712913][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.727419][ T5794] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.750604][ T5794] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.761797][ T5794] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.776962][ T5794] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.788065][ T5796] Bluetooth: hci0: command tx timeout [ 99.794090][ T5796] Bluetooth: hci2: command tx timeout [ 99.817939][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.837222][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.852469][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.865838][ T5792] Bluetooth: hci3: command tx timeout [ 99.873653][ T5792] Bluetooth: hci1: command tx timeout [ 99.887494][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.900602][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.912248][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.927959][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.947426][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.959764][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.970675][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.982637][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.996388][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.622786][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.640083][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.651243][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.671383][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.690374][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.704113][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.723934][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.740779][ T5789] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.751415][ T5789] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.765860][ T5789] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.784289][ T5789] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.862666][ T5795] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.883245][ T5795] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.892990][ T5795] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.902318][ T5795] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.992696][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.009210][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.055486][ T5885] syzkaller0: entered promiscuous mode [ 101.061113][ T5885] syzkaller0: entered allmulticast mode [ 101.868004][ T5792] Bluetooth: hci2: command tx timeout [ 101.870362][ T5796] Bluetooth: hci0: command tx timeout [ 101.945772][ T5796] Bluetooth: hci1: command tx timeout [ 101.946173][ T5792] Bluetooth: hci3: command tx timeout [ 103.057873][ T3546] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.096423][ T3546] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.168662][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.217672][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.989804][ T5892] overlayfs: missing 'lowerdir' [ 104.041992][ T2895] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.059012][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.079660][ T2895] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.110754][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.293102][ T2895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.296295][ T5898] netlink: 124 bytes leftover after parsing attributes in process `syz.0.7'. [ 104.308360][ T2895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.372581][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 104.577483][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 104.679991][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 104.782227][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 104.903966][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.814836][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.824363][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 106.933067][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 107.035133][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 107.064557][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 109.013836][ T5924] syzkaller0: entered promiscuous mode [ 109.029828][ T5924] syzkaller0: entered allmulticast mode [ 109.918472][ T786] IPVS: starting estimator thread 0... [ 110.094419][ T5930] IPVS: using max 21 ests per chain, 50400 per kthread [ 110.173871][ T5931] overlayfs: missing 'lowerdir' [ 111.411858][ T5942] IPVS: rr: FWM 3 0x00000003 - no destination available [ 111.573912][ T5937] netlink: 124 bytes leftover after parsing attributes in process `syz.2.15'. [ 118.444523][ T5974] overlayfs: missing 'lowerdir' [ 119.212634][ T5983] IPVS: rr: FWM 3 0x00000003 - no destination available [ 120.423477][ T5990] netlink: 124 bytes leftover after parsing attributes in process `syz.2.27'. [ 122.274131][ T6000] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 123.746605][ T6018] overlayfs: missing 'lowerdir' [ 124.493651][ T5888] IPVS: starting estimator thread 0... [ 124.691457][ T6026] IPVS: using max 26 ests per chain, 62400 per kthread [ 124.793912][ T6029] fuse: Unknown parameter '0x0000000000000003' [ 125.746044][ T6032] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20004 [ 127.448514][ T6052] syz.2.42[6052]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 128.207223][ T6053] syzkaller0: entered promiscuous mode [ 128.223497][ T6053] syzkaller0: entered allmulticast mode [ 129.475946][ T6069] overlayfs: missing 'lowerdir' [ 130.311024][ T5888] IPVS: starting estimator thread 0... [ 130.420112][ T6076] IPVS: using max 26 ests per chain, 62400 per kthread [ 131.803365][ C0] hrtimer: interrupt took 69393 ns [ 133.327340][ T6102] overlayfs: missing 'lowerdir' [ 133.624627][ T6099] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20004 [ 133.950366][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.957406][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 141.301504][ T6139] overlayfs: missing 'lowerdir' [ 143.579825][ T6152] syzkaller0: entered promiscuous mode [ 143.589424][ T6149] block device autoloading is deprecated and will be removed. [ 143.601934][ T6152] syzkaller0: entered allmulticast mode [ 144.274390][ T5888] IPVS: starting estimator thread 0... [ 144.423672][ T6162] IPVS: using max 16 ests per chain, 38400 per kthread [ 144.779941][ T6166] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20004 [ 149.274389][ T6186] overlayfs: missing 'lowerdir' [ 152.719329][ T6216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.84'. [ 153.415396][ T6221] IPVS: rr: FWM 3 0x00000003 - no destination available [ 153.907879][ T6223] syzkaller0: entered promiscuous mode [ 153.914454][ T6223] syzkaller0: entered allmulticast mode [ 156.106487][ T6236] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20004 [ 157.453130][ T6226] warning: `syz.3.83' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 158.032391][ T6245] lo: entered promiscuous mode [ 158.037537][ T6245] lo: entered allmulticast mode [ 158.048354][ T6245] tunl0: entered promiscuous mode [ 158.053730][ T6245] tunl0: entered allmulticast mode [ 158.066796][ T6245] gre0: entered promiscuous mode [ 158.072040][ T6245] gre0: entered allmulticast mode [ 158.083624][ T6245] gretap0: entered promiscuous mode [ 158.089094][ T6245] gretap0: entered allmulticast mode [ 158.098947][ T6245] erspan0: entered promiscuous mode [ 158.104579][ T6245] erspan0: entered allmulticast mode [ 158.113511][ T6245] ip_vti0: entered promiscuous mode [ 158.118970][ T6245] ip_vti0: entered allmulticast mode [ 158.177355][ T6245] ip6_vti0: entered promiscuous mode [ 158.183167][ T6245] ip6_vti0: entered allmulticast mode [ 158.195110][ T6245] sit0: entered promiscuous mode [ 158.200689][ T6245] sit0: entered allmulticast mode [ 158.212241][ T6245] ip6tnl0: entered promiscuous mode [ 158.218106][ T6245] ip6tnl0: entered allmulticast mode [ 158.228464][ T6245] ip6gre0: entered promiscuous mode [ 158.234059][ T6245] ip6gre0: entered allmulticast mode [ 158.250885][ T6245] syz_tun: entered promiscuous mode [ 158.256450][ T6245] syz_tun: entered allmulticast mode [ 158.266446][ T6245] ip6gretap0: entered promiscuous mode [ 158.272236][ T6245] ip6gretap0: entered allmulticast mode [ 158.281201][ T6245] bridge0: entered promiscuous mode [ 158.289721][ T6245] bridge0: entered allmulticast mode [ 158.298740][ T6245] vcan0: entered promiscuous mode [ 158.304105][ T6245] vcan0: entered allmulticast mode [ 158.312416][ T6245] bond0: entered promiscuous mode [ 158.317693][ T6245] bond_slave_0: entered promiscuous mode [ 158.324957][ T6245] bond_slave_1: entered promiscuous mode [ 158.331760][ T6245] bond0: entered allmulticast mode [ 158.337713][ T6245] bond_slave_0: entered allmulticast mode [ 158.343878][ T6245] bond_slave_1: entered allmulticast mode [ 158.354970][ T6245] team0: entered promiscuous mode [ 158.360144][ T6245] team_slave_0: entered promiscuous mode [ 158.367493][ T6245] team_slave_1: entered promiscuous mode [ 158.374930][ T6245] team0: entered allmulticast mode [ 158.380167][ T6245] team_slave_0: entered allmulticast mode [ 158.386443][ T6245] team_slave_1: entered allmulticast mode [ 158.398657][ T6245] dummy0: entered promiscuous mode [ 158.406780][ T6245] dummy0: entered allmulticast mode [ 158.418161][ T6245] nlmon0: entered promiscuous mode [ 158.423640][ T6245] nlmon0: entered allmulticast mode [ 158.535565][ T6245] caif0: entered promiscuous mode [ 158.541009][ T6245] caif0: entered allmulticast mode [ 158.547373][ T6245] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 159.668910][ T6256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.94'. [ 161.288890][ T6268] loop0: detected capacity change from 0 to 128 [ 161.776995][ T6268] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 161.870934][ T6268] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 162.277343][ T5793] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 163.156563][ T6278] syzkaller0: entered promiscuous mode [ 163.168432][ T6278] syzkaller0: entered allmulticast mode [ 163.176787][ T6284] lo: entered promiscuous mode [ 163.181818][ T6284] lo: entered allmulticast mode [ 163.187991][ T6284] tunl0: entered promiscuous mode [ 163.194006][ T6284] tunl0: entered allmulticast mode [ 163.202323][ T6284] gre0: entered promiscuous mode [ 163.207501][ T6284] gre0: entered allmulticast mode [ 163.214298][ T6284] gretap0: entered promiscuous mode [ 163.220369][ T6284] gretap0: entered allmulticast mode [ 163.227442][ T6284] erspan0: entered promiscuous mode [ 163.233129][ T6284] erspan0: entered allmulticast mode [ 163.239199][ T6284] ip_vti0: entered promiscuous mode [ 163.244509][ T6284] ip_vti0: entered allmulticast mode [ 163.251096][ T6284] ip6_vti0: entered promiscuous mode [ 163.257393][ T6284] ip6_vti0: entered allmulticast mode [ 163.264482][ T6284] sit0: entered promiscuous mode [ 163.269757][ T6284] sit0: entered allmulticast mode [ 163.276370][ T6284] ip6tnl0: entered promiscuous mode [ 163.281794][ T6284] ip6tnl0: entered allmulticast mode [ 163.289309][ T6284] ip6gre0: entered promiscuous mode [ 163.294726][ T6284] ip6gre0: entered allmulticast mode [ 163.301242][ T6284] syz_tun: entered promiscuous mode [ 163.306923][ T6284] syz_tun: entered allmulticast mode [ 163.313210][ T6284] ip6gretap0: entered promiscuous mode [ 163.319020][ T6284] ip6gretap0: entered allmulticast mode [ 163.325753][ T6284] bridge0: entered promiscuous mode [ 163.331054][ T6284] bridge0: entered allmulticast mode [ 163.337956][ T6284] vcan0: entered promiscuous mode [ 163.343262][ T6284] vcan0: entered allmulticast mode [ 163.349514][ T6284] bond0: entered promiscuous mode [ 163.355590][ T6284] bond_slave_0: entered promiscuous mode [ 163.361723][ T6284] bond_slave_1: entered promiscuous mode [ 163.368060][ T6284] bond0: entered allmulticast mode [ 163.373243][ T6284] bond_slave_0: entered allmulticast mode [ 163.379262][ T6284] bond_slave_1: entered allmulticast mode [ 163.387569][ T6284] team0: entered promiscuous mode [ 163.392736][ T6284] team_slave_0: entered promiscuous mode [ 163.399537][ T6284] team_slave_1: entered promiscuous mode [ 163.405764][ T6284] team0: entered allmulticast mode [ 163.410933][ T6284] team_slave_0: entered allmulticast mode [ 163.416826][ T6284] team_slave_1: entered allmulticast mode [ 163.423988][ T6284] dummy0: entered promiscuous mode [ 163.429191][ T6284] dummy0: entered allmulticast mode [ 163.435859][ T6284] nlmon0: entered promiscuous mode [ 163.441231][ T6284] nlmon0: entered allmulticast mode [ 163.450952][ T6284] caif0: entered promiscuous mode [ 163.456363][ T6284] caif0: entered allmulticast mode [ 163.462251][ T6284] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 163.727527][ T6290] IPVS: rr: FWM 3 0x00000003 - no destination available [ 164.162591][ T6275] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20004 [ 165.020362][ T6301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.104'. [ 166.161005][ T6300] loop3: detected capacity change from 0 to 32768 [ 166.404319][ T6300] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.105 (6300) [ 166.515419][ T6300] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 166.537243][ T6300] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 166.638428][ T6300] BTRFS info (device loop3): enabling auto defrag [ 166.674407][ T6300] BTRFS info (device loop3): doing ref verification [ 166.694936][ T6300] BTRFS info (device loop3): use no compression [ 166.704686][ T6300] BTRFS info (device loop3): force clearing of disk cache [ 166.712334][ T6300] BTRFS info (device loop3): max_inline at 4096 [ 166.733531][ T6300] BTRFS info (device loop3): disabling free space tree [ 166.989189][ T6321] IPVS: rr: FWM 3 0x00000003 - no destination available [ 167.195857][ T6300] BTRFS info (device loop3): enabling ssd optimizations [ 167.239327][ T6300] BTRFS info (device loop3): auto enabling async discard [ 167.288119][ T6300] BTRFS info (device loop3): rebuilding free space tree [ 167.594493][ T6300] BTRFS info (device loop3): disabling free space tree [ 167.603111][ T6300] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 167.632189][ T6300] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 167.938783][ T6327] loop0: detected capacity change from 0 to 2048 [ 167.970367][ T6327] EXT4-fs: Ignoring removed nobh option [ 168.050614][ T6327] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.070428][ T6327] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.211074][ T5789] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 168.344630][ T5793] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /32/file0: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 168.598008][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.694508][ T6346] loop0: detected capacity change from 0 to 1024 [ 172.159355][ T6343] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 172.454891][ T6354] IPVS: rr: FWM 3 0x00000003 - no destination available [ 173.804393][ T6369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.114'. [ 175.277304][ T6373] loop0: detected capacity change from 0 to 1024 [ 177.444026][ T6384] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 177.784193][ T6388] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20004 [ 177.840736][ T6387] syzkaller0: entered promiscuous mode [ 177.847266][ T6387] syzkaller0: entered allmulticast mode [ 179.183158][ T6401] netlink: 28 bytes leftover after parsing attributes in process `syz.1.128'. [ 181.845198][ T23] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 182.271930][ T23] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 182.282970][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.292034][ T23] usb 3-1: Product: syz [ 182.298234][ T23] usb 3-1: Manufacturer: syz [ 182.304272][ T23] usb 3-1: SerialNumber: syz [ 182.380780][ T23] usb 3-1: config 0 descriptor?? [ 182.451268][ T6417] fuse: Unknown parameter '0x0000000000000003' [ 182.638024][ T23] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 183.545809][ T6421] IPVS: rr: FWM 3 0x00000003 - no destination available [ 184.376186][ T23] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 184.468142][ T23] usb 3-1: USB disconnect, device number 2 [ 184.478290][ T6423] IPVS: rr: FWM 3 0x00000003 - no destination available [ 184.881440][ T6426] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20004 [ 186.082192][ T6432] loop2: detected capacity change from 0 to 1024 [ 186.144081][ T6414] lo: entered promiscuous mode [ 186.149083][ T6414] lo: entered allmulticast mode [ 186.154925][ T6414] tunl0: entered promiscuous mode [ 186.160200][ T6414] tunl0: entered allmulticast mode [ 186.166549][ T6414] gre0: entered promiscuous mode [ 186.171824][ T6414] gre0: entered allmulticast mode [ 186.179258][ T6414] gretap0: entered promiscuous mode [ 186.185560][ T6414] gretap0: entered allmulticast mode [ 186.192987][ T6414] erspan0: entered promiscuous mode [ 186.199386][ T6414] erspan0: entered allmulticast mode [ 186.206521][ T6414] ip_vti0: entered promiscuous mode [ 186.212396][ T6414] ip_vti0: entered allmulticast mode [ 186.219242][ T6414] ip6_vti0: entered promiscuous mode [ 186.225186][ T6414] ip6_vti0: entered allmulticast mode [ 186.232365][ T6414] sit0: entered promiscuous mode [ 186.238133][ T6414] sit0: entered allmulticast mode [ 186.244812][ T6414] ip6tnl0: entered promiscuous mode [ 186.250829][ T6414] ip6tnl0: entered allmulticast mode [ 186.257663][ T6414] ip6gre0: entered promiscuous mode [ 186.263017][ T6414] ip6gre0: entered allmulticast mode [ 186.269604][ T6414] syz_tun: entered promiscuous mode [ 186.275511][ T6414] syz_tun: entered allmulticast mode [ 186.282325][ T6414] ip6gretap0: entered promiscuous mode [ 186.288774][ T6414] ip6gretap0: entered allmulticast mode [ 186.296262][ T6414] bridge0: entered promiscuous mode [ 186.301848][ T6414] bridge0: entered allmulticast mode [ 186.308489][ T6414] vcan0: entered promiscuous mode [ 186.313822][ T6414] vcan0: entered allmulticast mode [ 186.320505][ T6414] bond0: entered promiscuous mode [ 186.325703][ T6414] bond_slave_0: entered promiscuous mode [ 186.331572][ T6414] bond_slave_1: entered promiscuous mode [ 186.337725][ T6414] bond0: entered allmulticast mode [ 186.342857][ T6414] bond_slave_0: entered allmulticast mode [ 186.348884][ T6414] bond_slave_1: entered allmulticast mode [ 186.355893][ T6414] team0: entered promiscuous mode [ 186.361061][ T6414] team_slave_0: entered promiscuous mode [ 186.367308][ T6414] team_slave_1: entered promiscuous mode [ 186.373512][ T6414] team0: entered allmulticast mode [ 186.378745][ T6414] team_slave_0: entered allmulticast mode [ 186.384675][ T6414] team_slave_1: entered allmulticast mode [ 186.391659][ T6414] dummy0: entered promiscuous mode [ 186.398095][ T6414] dummy0: entered allmulticast mode [ 186.404354][ T6414] nlmon0: entered promiscuous mode [ 186.409500][ T6414] nlmon0: entered allmulticast mode [ 186.417536][ T6414] caif0: entered promiscuous mode [ 186.422623][ T6414] caif0: entered allmulticast mode [ 186.428172][ T6414] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 187.899698][ T6439] netlink: 28 bytes leftover after parsing attributes in process `syz.1.140'. [ 188.673803][ T6444] fuse: Unknown parameter '0x0000000000000003' [ 188.789513][ T6449] IPVS: rr: FWM 3 0x00000003 - no destination available [ 190.189859][ T6465] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20004 [ 190.861846][ T6468] loop2: detected capacity change from 0 to 32768 [ 190.952620][ T6468] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 192.033563][ T6482] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 192.214194][ T6468] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 192.792927][ T6490] netlink: 28 bytes leftover after parsing attributes in process `syz.1.151'. [ 193.167942][ T6468] XFS (loop2): Starting recovery (logdev: internal) [ 193.286599][ T5862] XFS (loop2): Metadata corruption detected at xfs_buf_ioend+0x260/0x6f0, xfs_inode block 0x2280 xfs_inode_buf_verify [ 193.321873][ T6494] fuse: Unknown parameter '0x0000000000000003' [ 193.331461][ T5862] XFS (loop2): Unmount and run xfs_repair [ 193.350255][ T5862] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 193.363886][ T5862] 00000000: 49 4e 00 00 03 00 00 00 00 00 00 00 00 00 00 00 IN.............. [ 193.374169][ T5862] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 193.384358][ T5862] 00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 193.394648][ T5862] 00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 193.505526][ T6499] IPVS: rr: FWM 3 0x00000003 - no destination available [ 193.623417][ T5862] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 193.636129][ T5862] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 193.646336][ T5862] 00000060: ff 03 00 ff 34 36 cc 5b 00 00 00 00 00 00 00 00 ....46.[........ [ 193.655859][ T5862] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 193.678760][ T6468] XFS (loop2): metadata I/O error in "xlog_recover_items_pass2+0xe3/0x130" at daddr 0x2280 len 64 error 117 [ 193.695297][ T6468] XFS (loop2): Filesystem has been shut down due to log error (0x2). [ 193.704143][ T6468] XFS (loop2): Please unmount the filesystem and rectify the problem(s). [ 193.715945][ T6468] XFS (loop2): log mount/recovery failed: error -117 [ 193.777815][ T6468] XFS (loop2): log mount failed [ 194.662486][ T6507] loop1: detected capacity change from 0 to 64 [ 194.886782][ T6507] ======================================================= [ 194.886782][ T6507] WARNING: The mand mount option has been deprecated and [ 194.886782][ T6507] and is ignored by this kernel. Remove the mand [ 194.886782][ T6507] option from the mount to silence this warning. [ 194.886782][ T6507] ======================================================= [ 195.674820][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.681252][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.697433][ T6519] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20004 [ 196.898529][ T6507] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 197.035618][ T6521] lo: entered promiscuous mode [ 197.040956][ T6521] lo: entered allmulticast mode [ 197.050923][ T6521] tunl0: entered promiscuous mode [ 197.056335][ T6521] tunl0: entered allmulticast mode [ 197.072555][ T6521] gre0: entered promiscuous mode [ 197.078367][ T6521] gre0: entered allmulticast mode [ 197.088751][ T6521] gretap0: entered promiscuous mode [ 197.094341][ T6521] gretap0: entered allmulticast mode [ 197.103432][ T6521] erspan0: entered promiscuous mode [ 197.108782][ T6521] erspan0: entered allmulticast mode [ 197.117426][ T6521] ip_vti0: entered promiscuous mode [ 197.122871][ T6521] ip_vti0: entered allmulticast mode [ 197.177304][ T6521] ip6_vti0: entered promiscuous mode [ 197.183134][ T6521] ip6_vti0: entered allmulticast mode [ 197.193475][ T6521] sit0: entered promiscuous mode [ 197.199220][ T6521] sit0: entered allmulticast mode [ 197.209869][ T6521] ip6tnl0: entered promiscuous mode [ 197.215566][ T6521] ip6tnl0: entered allmulticast mode [ 197.225253][ T6521] ip6gre0: entered promiscuous mode [ 197.230821][ T6521] ip6gre0: entered allmulticast mode [ 197.240982][ T6521] syz_tun: entered promiscuous mode [ 197.246614][ T6521] syz_tun: entered allmulticast mode [ 197.257373][ T6521] ip6gretap0: entered promiscuous mode [ 197.265890][ T6521] ip6gretap0: entered allmulticast mode [ 197.275587][ T6521] bridge0: entered promiscuous mode [ 197.281419][ T6521] bridge0: entered allmulticast mode [ 197.290442][ T6521] vcan0: entered promiscuous mode [ 197.295846][ T6521] vcan0: entered allmulticast mode [ 197.304910][ T6521] bond0: entered promiscuous mode [ 197.310504][ T6521] bond_slave_0: entered promiscuous mode [ 197.318276][ T6521] bond_slave_1: entered promiscuous mode [ 197.325408][ T6521] bond0: entered allmulticast mode [ 197.330813][ T6521] bond_slave_0: entered allmulticast mode [ 197.336841][ T6521] bond_slave_1: entered allmulticast mode [ 197.349208][ T6521] team0: entered promiscuous mode [ 197.355350][ T6521] team_slave_0: entered promiscuous mode [ 197.362417][ T6521] team_slave_1: entered promiscuous mode [ 197.372055][ T6521] team0: entered allmulticast mode [ 197.377655][ T6521] team_slave_0: entered allmulticast mode [ 197.384344][ T6521] team_slave_1: entered allmulticast mode [ 197.397896][ T6521] dummy0: entered promiscuous mode [ 197.403603][ T6521] dummy0: entered allmulticast mode [ 197.414451][ T6521] nlmon0: entered promiscuous mode [ 197.420314][ T6521] nlmon0: entered allmulticast mode [ 197.603821][ T6521] caif0: entered promiscuous mode [ 197.609101][ T6521] caif0: entered allmulticast mode [ 197.614768][ T6521] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 197.961212][ T6525] netlink: 28 bytes leftover after parsing attributes in process `syz.3.160'. [ 198.638325][ T6527] loop0: detected capacity change from 0 to 4096 [ 198.917044][ T6527] ntfs3: loop0: It is recommened to use chkdsk. [ 199.226961][ T6527] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00 [ 199.252009][ T6527] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00 [ 199.263423][ T6527] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00 [ 199.271410][ T6527] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00 [ 199.313182][ T6527] ntfs3: loop0: try to read out of volume at offset 0x3fffffc1c00 [ 199.322890][ T6527] ntfs3: loop0: try to read out of volume at offset 0x3fffffc2c00 [ 199.335596][ T6527] ntfs3: loop0: try to read out of volume at offset 0x3fffffc4c00 [ 199.362203][ T6527] ntfs3: loop0: try to read out of volume at offset 0x3fffffc8c00 [ 199.418673][ T6527] ntfs3: loop0: try to read out of volume at offset 0x3fffffd0c00 [ 199.526575][ T6539] fuse: Unknown parameter '0x0000000000000003' [ 200.773496][ T6547] netlink: 28 bytes leftover after parsing attributes in process `syz.3.170'. [ 202.226403][ T6552] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 202.637547][ T5886] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 202.665770][ T6558] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20004 [ 202.869195][ T5886] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 202.889451][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.906119][ T5886] usb 1-1: Product: syz [ 202.912409][ T5886] usb 1-1: Manufacturer: syz [ 202.920347][ T5886] usb 1-1: SerialNumber: syz [ 202.945952][ T5886] usb 1-1: config 0 descriptor?? [ 203.176416][ T5886] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 203.383556][ T5863] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 203.573480][ T5863] usb 3-1: Using ep0 maxpacket: 32 [ 203.585420][ T5863] usb 3-1: config 10 has an invalid interface number: 171 but max is 0 [ 203.594540][ T5863] usb 3-1: config 10 has an invalid descriptor of length 0, skipping remainder of the config [ 203.606515][ T5863] usb 3-1: config 10 has no interface number 0 [ 203.612902][ T5863] usb 3-1: config 10 interface 171 has no altsetting 0 [ 203.625974][ T5863] usb 3-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice=d0.8f [ 203.637546][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.646256][ T5863] usb 3-1: Product: syz [ 203.650888][ T5863] usb 3-1: Manufacturer: syz [ 203.661950][ T5863] usb 3-1: SerialNumber: syz [ 204.113035][ T5863] s2255 3-1:10.171: Could not find bulk-in endpoint [ 204.449609][ T5863] Sensoray 2255 driver load failed: 0xfffffff4 [ 204.471016][ T5863] s2255: probe of 3-1:10.171 failed with error -12 [ 204.499189][ T6570] overlayfs: missing 'lowerdir' [ 204.505547][ T5863] usb 3-1: USB disconnect, device number 3 [ 204.580098][ T5886] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 204.640368][ T5886] usb 1-1: USB disconnect, device number 2 [ 204.767448][ T6578] fuse: Unknown parameter '0x0000000000000003' [ 204.779768][ T6575] loop3: detected capacity change from 0 to 4096 [ 204.789980][ T6575] ntfs3: loop3: It is recommened to use chkdsk. [ 204.798187][ T6575] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00 [ 204.807200][ T6575] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00 [ 204.817047][ T6579] loop1: detected capacity change from 0 to 256 [ 204.824645][ T6575] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00 [ 204.857950][ T6579] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 204.869790][ T6575] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00 [ 204.881304][ T6579] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 204.890456][ T6575] ntfs3: loop3: try to read out of volume at offset 0x3fffffc1c00 [ 204.900779][ T6575] ntfs3: loop3: try to read out of volume at offset 0x3fffffc2c00 [ 204.921426][ T6575] ntfs3: loop3: try to read out of volume at offset 0x3fffffc4c00 [ 204.930927][ T6579] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 204.944089][ T6575] ntfs3: loop3: try to read out of volume at offset 0x3fffffc8c00 [ 204.952043][ T6575] ntfs3: loop3: try to read out of volume at offset 0x3fffffd0c00 [ 205.475072][ T6583] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20004 [ 206.073862][ T6582] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 206.620497][ T6602] loop0: detected capacity change from 0 to 1024 [ 206.745222][ T6599] overlayfs: missing 'lowerdir' [ 207.762525][ T6617] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20004 [ 209.063679][ T6624] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 209.571827][ T6630] loop3: detected capacity change from 0 to 64 [ 210.350704][ T6633] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 212.639597][ T6650] overlayfs: missing 'lowerdir' [ 213.609174][ T6659] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.200'. [ 214.863010][ T6666] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20004 [ 216.533625][ T6671] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 216.805400][ T6676] overlayfs: metacopy with no lower data found - abort lookup (/file2) [ 216.824449][ T6678] loop1: detected capacity change from 0 to 1024 [ 218.121532][ T6688] overlayfs: failed to resolve './file1': -2 [ 219.592357][ T6696] loop3: detected capacity change from 0 to 256 [ 219.643914][ T6696] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 219.672616][ T6696] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 219.737493][ T6696] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 219.776406][ T6698] syz.2.212 uses obsolete (PF_INET,SOCK_PACKET) [ 220.344158][ T6704] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20004 [ 221.359190][ T6707] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 224.288368][ T6723] overlayfs: failed to resolve './file1': -2 [ 226.707986][ T6740] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 227.059947][ T6728] loop0: detected capacity change from 0 to 40427 [ 227.153072][ T6728] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 227.167920][ T6744] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20004 [ 227.194143][ T6728] F2FS-fs (loop0): Image doesn't support compression [ 227.202203][ T6728] F2FS-fs (loop0): Image doesn't support compression [ 227.233212][ T6728] F2FS-fs (loop0): invalid crc value [ 227.258825][ T6728] F2FS-fs (loop0): Failed to start F2FS issue_checkpoint_thread (-4) [ 227.355156][ T6747] fuse: Unknown parameter '0xffffffffffffffff' [ 228.551322][ T6755] loop0: detected capacity change from 0 to 2048 [ 229.366898][ T6755] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.403549][ T6755] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.822841][ T28] audit: type=1800 audit(1759214014.567:2): pid=6755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.227" name="file0" dev="loop0" ino=13 res=0 errno=0 [ 229.845050][ T6755] fs-verity: sha256 using implementation "sha256-avx2" [ 229.887814][ T6771] overlayfs: failed to resolve './file1': -2 [ 230.199295][ T6755] fs-verity (loop0, inode 13): Error -4 building Merkle tree [ 230.244177][ T6772] netlink: 68 bytes leftover after parsing attributes in process `syz.2.230'. [ 230.295800][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.562710][ T6780] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 232.093789][ T5863] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 232.306671][ T5863] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 232.361480][ T5863] usb 1-1: config 1 has no interface number 0 [ 232.378857][ T5863] usb 1-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 232.420564][ T5863] usb 1-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 232.455855][ T5863] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 232.483149][ T5863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.503209][ T5863] usb 1-1: Product: syz [ 232.513481][ T5863] usb 1-1: Manufacturer: syz [ 232.523400][ T5863] usb 1-1: SerialNumber: syz [ 232.570967][ T6786] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 232.635319][ T5863] usb 1-1: Expected 3 endpoints, found: 1 [ 233.158343][ T6791] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20004 [ 233.164037][ T6786] Zero length message leads to an empty skb [ 233.340024][ T6795] fuse: Unknown parameter '0xffffffffffffffff' [ 234.213912][ T27] usb 1-1: USB disconnect, device number 3 [ 235.523560][ T5797] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 235.880830][ T5797] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 236.360215][ T5797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.417352][ T5797] usb 4-1: Product: syz [ 236.421603][ T5797] usb 4-1: Manufacturer: syz [ 236.458294][ T5797] usb 4-1: SerialNumber: syz [ 236.485854][ T5797] usb 4-1: config 0 descriptor?? [ 236.798022][ T5797] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 237.558571][ T6817] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 238.050780][ T6821] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20004 [ 238.729004][ T6832] netlink: 20 bytes leftover after parsing attributes in process `syz.0.248'. [ 239.620072][ T5797] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 239.673433][ T5797] usb 4-1: USB disconnect, device number 2 [ 239.684554][ T6846] fuse: Unknown parameter '0xffffffffffffffff' [ 239.990365][ T6850] loop1: detected capacity change from 0 to 2048 [ 240.404043][ T6850] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.633683][ T6850] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.883432][ T28] audit: type=1800 audit(1759214025.617:3): pid=6850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.251" name="file0" dev="loop1" ino=13 res=0 errno=0 [ 240.947108][ T6850] fs-verity (loop1, inode 13): Error -28 writing Merkle tree block 82569 [ 240.968509][ T6850] fs-verity (loop1, inode 13): Error -28 building Merkle tree [ 242.004536][ T5795] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.615374][ T6869] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20004 [ 243.154051][ T23] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 243.784424][ T6870] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 243.915650][ T23] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 243.944728][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.963191][ T23] usb 3-1: Product: syz [ 243.968832][ T23] usb 3-1: Manufacturer: syz [ 243.983788][ T23] usb 3-1: SerialNumber: syz [ 244.006282][ T23] usb 3-1: config 0 descriptor?? [ 244.390958][ T23] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 246.061724][ T6900] loop3: detected capacity change from 0 to 2048 [ 246.768491][ T23] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 246.801098][ T23] usb 3-1: USB disconnect, device number 4 [ 247.121948][ T6900] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.139647][ T6900] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.395331][ T28] audit: type=1800 audit(1759214032.147:4): pid=6900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.263" name="file0" dev="loop3" ino=13 res=0 errno=0 [ 247.422030][ T6909] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20004 [ 247.771386][ T6900] fs-verity (loop3, inode 13): Error -4 building Merkle tree [ 248.477834][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.703648][ T6924] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 251.899714][ T6944] netlink: 68 bytes leftover after parsing attributes in process `syz.1.276'. [ 252.366826][ T6948] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20004 [ 252.759914][ T6952] loop3: detected capacity change from 0 to 8 [ 253.653171][ T6952] SQUASHFS error: xz decompression failed, data probably corrupt [ 253.744864][ T6952] SQUASHFS error: Failed to read block 0x108: -5 [ 253.763514][ T6952] SQUASHFS error: Unable to read metadata cache entry [106] [ 253.771013][ T6952] SQUASHFS error: Unable to read inode 0x11f [ 254.932897][ T6962] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 257.022418][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.037292][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.904729][ T6991] netlink: 28 bytes leftover after parsing attributes in process `syz.2.288'. [ 258.105940][ T6994] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20004 [ 259.481138][ T7006] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.293'. [ 260.966279][ T7009] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 262.293901][ T7021] netlink: 124 bytes leftover after parsing attributes in process `syz.0.296'. [ 263.134832][ T5888] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 263.204933][ T7028] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20004 [ 264.252055][ T5888] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 265.020001][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.031127][ T5888] usb 2-1: Product: syz [ 265.035686][ T5888] usb 2-1: Manufacturer: syz [ 265.041569][ T5888] usb 2-1: SerialNumber: syz [ 265.058087][ T5888] usb 2-1: config 0 descriptor?? [ 265.440566][ T5888] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 266.189420][ T7046] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 267.576109][ T7060] netlink: 124 bytes leftover after parsing attributes in process `syz.3.307'. [ 267.892881][ T7062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.308'. [ 268.649551][ T5888] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32 [ 269.205349][ T5888] usb 2-1: USB disconnect, device number 2 [ 269.586868][ T7071] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20004 [ 272.109195][ T7078] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 272.322249][ T7083] loop0: detected capacity change from 0 to 1024 [ 272.626536][ T5888] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 273.807326][ T7096] netlink: 124 bytes leftover after parsing attributes in process `syz.1.318'. [ 274.200082][ T7092] loop3: detected capacity change from 0 to 2048 [ 274.519154][ T7098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.317'. [ 274.894623][ T7092] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 275.591971][ T7109] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20004 [ 275.765387][ T8] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 276.779031][ T8] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 277.567475][ T7120] loop1: detected capacity change from 0 to 1024 [ 277.585310][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.603669][ T8] usb 1-1: Product: syz [ 277.608264][ T7121] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 277.714360][ T8] usb 1-1: Manufacturer: syz [ 277.719164][ T8] usb 1-1: SerialNumber: syz [ 277.726970][ T8] usb 1-1: config 0 descriptor?? [ 278.000835][ T7125] loop3: detected capacity change from 0 to 2048 [ 278.048454][ T8] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 278.073203][ T7125] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 278.569744][ T7132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.328'. [ 279.590097][ T7140] netlink: 124 bytes leftover after parsing attributes in process `syz.1.329'. [ 280.232001][ T8] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 280.267529][ T8] usb 1-1: USB disconnect, device number 4 [ 282.388971][ T7168] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 282.681216][ T7171] loop1: detected capacity change from 0 to 1024 [ 283.039901][ T7179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.338'. [ 283.813584][ T786] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 284.044415][ T786] usb 1-1: Using ep0 maxpacket: 16 [ 284.069884][ T786] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 284.124784][ T786] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 284.134346][ T786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.142713][ T786] usb 1-1: Product: syz [ 284.147392][ T786] usb 1-1: Manufacturer: syz [ 284.152302][ T786] usb 1-1: SerialNumber: syz [ 284.197958][ T786] usb 1-1: config 0 descriptor?? [ 284.520897][ T5888] usb 1-1: USB disconnect, device number 5 [ 284.574655][ T7185] loop3: detected capacity change from 0 to 1024 [ 284.631317][ T7185] hfsplus: bad catalog entry type [ 284.663802][ T786] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 284.711389][ T3546] hfsplus: b-tree write err: -5, ino 4 [ 284.873988][ T786] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 284.895564][ T786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.922856][ T786] usb 3-1: Product: syz [ 284.936179][ T786] usb 3-1: Manufacturer: syz [ 284.941312][ T786] usb 3-1: SerialNumber: syz [ 285.016613][ T786] usb 3-1: config 0 descriptor?? [ 285.260374][ T786] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 285.864702][ T786] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32 [ 286.547393][ T7199] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 287.317770][ T8] usb 3-1: USB disconnect, device number 5 [ 287.464423][ T7211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.349'. [ 288.333642][ T5797] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 288.373164][ T7217] loop1: detected capacity change from 0 to 256 [ 288.401544][ T7217] exfat: Deprecated parameter 'namecase' [ 288.441082][ T7217] exfat: Deprecated parameter 'namecase' [ 288.482101][ T7217] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 289.310110][ T7221] loop3: detected capacity change from 0 to 1024 [ 289.343089][ T5797] usb 3-1: config 0 has an invalid interface number: 48 but max is 0 [ 289.352024][ T5797] usb 3-1: config 0 has no interface number 0 [ 289.361786][ T5797] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0002, bcdDevice=f5.d2 [ 289.388065][ T5797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.410830][ T5797] usb 3-1: Product: syz [ 289.421273][ T5797] usb 3-1: Manufacturer: syz [ 289.440206][ T5797] usb 3-1: SerialNumber: syz [ 289.465818][ T5797] usb 3-1: config 0 descriptor?? [ 289.505409][ T5797] kvaser_usb 3-1:0.48: Cannot get usb endpoint(s) [ 289.830741][ T5797] usb 3-1: USB disconnect, device number 6 [ 290.002122][ T7231] IPVS: rr: FWM 3 0x00000003 - no destination available [ 291.933980][ T7241] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 292.212872][ T7244] loop2: detected capacity change from 0 to 2048 [ 292.260223][ T7244] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 292.666323][ T7248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.360'. [ 293.553165][ T7252] netlink: 124 bytes leftover after parsing attributes in process `syz.2.362'. [ 294.447852][ T7261] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20004 [ 294.657603][ T7263] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.366'. [ 296.009154][ T7271] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 296.656722][ T7282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.371'. [ 297.723443][ T6904] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 297.859801][ T7287] netlink: 124 bytes leftover after parsing attributes in process `syz.0.372'. [ 297.923769][ T6904] usb 3-1: Using ep0 maxpacket: 16 [ 297.961863][ T6904] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.000110][ T6904] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 298.013451][ T6904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.021986][ T6904] usb 3-1: Product: syz [ 298.026440][ T6904] usb 3-1: Manufacturer: syz [ 298.031363][ T6904] usb 3-1: SerialNumber: syz [ 298.062478][ T6904] usb 3-1: config 0 descriptor?? [ 298.185786][ T7278] loop1: detected capacity change from 0 to 32768 [ 298.281205][ T7278] (syz.1.370,7278,1):ocfs2_find_entry:1075 ERROR: status = -117 [ 298.326273][ T7278] (syz.1.370,7278,1):ocfs2_init_global_system_inodes:461 ERROR: status = -22 [ 298.332375][ T5886] usb 3-1: USB disconnect, device number 7 [ 298.384661][ T7278] (syz.1.370,7278,1):ocfs2_init_global_system_inodes:463 ERROR: Unable to load system inode 1, possibly corrupt fs? [ 298.384707][ T7278] (syz.1.370,7278,1):ocfs2_init_global_system_inodes:472 ERROR: status = -22 [ 298.453356][ T7278] (syz.1.370,7278,1):ocfs2_initialize_super:2256 ERROR: status = -22 [ 298.461799][ T7278] (syz.1.370,7278,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 298.772934][ T7291] loop1: detected capacity change from 0 to 1024 [ 299.281453][ T7298] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.377'. [ 300.183997][ T7305] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20004 [ 301.234242][ T7309] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 301.766844][ T7317] netlink: 124 bytes leftover after parsing attributes in process `syz.3.382'. [ 302.394313][ T7319] loop3: detected capacity change from 0 to 2048 [ 302.466420][ T7319] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 302.604143][ T7323] IPVS: rr: FWM 3 0x00000003 - no destination available [ 304.972065][ T7327] loop3: detected capacity change from 0 to 32768 [ 306.188499][ T7344] comedi comedi3: comedi_config --init_data is deprecated [ 306.217137][ T7345] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 306.357952][ T7327] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 306.357952][ T7327] [ 306.445493][ T7327] ERROR: (device loop3): remounting filesystem as read-only [ 306.453181][ T7327] xtLookup: xtSearch returned -5 [ 306.485733][ T7327] free_index: error reading directory table [ 307.366700][ T7356] netlink: 100 bytes leftover after parsing attributes in process `syz.3.391'. [ 308.309337][ T7362] loop1: detected capacity change from 0 to 1024 [ 308.311265][ T7364] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.396'. [ 308.357609][ T7361] loop0: detected capacity change from 0 to 2048 [ 308.400708][ T7361] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 312.340995][ T7389] netlink: 100 bytes leftover after parsing attributes in process `syz.1.401'. [ 313.149904][ T7395] IPVS: rr: FWM 3 0x00000003 - no destination available [ 313.238377][ T7397] loop2: detected capacity change from 0 to 2048 [ 313.321955][ T7397] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 313.341660][ T7399] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.406'. [ 315.100664][ T7407] loop1: detected capacity change from 0 to 1024 [ 315.189545][ T7409] loop2: detected capacity change from 0 to 16 [ 315.305652][ T7409] erofs: (device loop2): mounted with root inode @ nid 36. [ 315.938513][ T7416] loop2: detected capacity change from 0 to 512 [ 317.766651][ T7414] sched: RT throttling activated [ 318.270032][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.276865][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.522044][ T7416] EXT4-fs warning (device loop2): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop2. [ 319.799146][ T7423] netlink: 100 bytes leftover after parsing attributes in process `syz.2.412'. [ 322.667508][ T7450] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.419'. [ 322.827022][ T7453] loop0: detected capacity change from 0 to 1024 [ 323.987662][ T7447] loop3: detected capacity change from 0 to 32768 [ 324.109168][ T7447] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 324.357161][ T7447] XFS (loop3): Ending clean mount [ 324.701110][ T5789] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 324.942391][ T7472] netlink: 124 bytes leftover after parsing attributes in process `syz.0.423'. [ 328.666640][ T7497] loop1: detected capacity change from 0 to 1024 [ 328.717263][ T7498] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.430'. [ 330.861582][ T7510] netlink: 124 bytes leftover after parsing attributes in process `syz.2.433'. [ 331.437602][ T7516] IPVS: rr: FWM 3 0x00000003 - no destination available [ 334.630128][ T7539] loop3: detected capacity change from 0 to 512 [ 337.922575][ T7539] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 337.923125][ T7539] EXT4-fs: failed to create workqueue [ 337.938865][ T7539] EXT4-fs (loop3): mount failed [ 339.352380][ T7548] loop3: detected capacity change from 0 to 1024 [ 341.094959][ T7565] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.448'. [ 343.726552][ T8] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 344.133385][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 344.143052][ T8] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 344.151983][ T8] usb 2-1: config 179 has no interface number 0 [ 344.160136][ T8] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 344.172830][ T8] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 344.890859][ T8] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 344.926384][ T8] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 344.942320][ T8] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 344.965293][ T8] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 345.010800][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.124009][ T7573] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 346.173633][ T5849] usb 2-1: USB disconnect, device number 4 [ 346.173642][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 346.193384][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 346.238183][ T5886] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 346.264820][ T5886] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input5 [ 346.311272][ T5849] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 346.476758][ T7594] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.457'. [ 346.479870][ T7585] loop3: detected capacity change from 0 to 32768 [ 346.673664][ T7585] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.454 (7585) [ 346.793633][ T7585] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 347.313673][ T7585] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 347.372799][ T7585] BTRFS info (device loop3): using free space tree [ 347.558046][ T7609] IPVS: rr: FWM 3 0x00000003 - no destination available [ 348.323543][ T7585] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 348.336012][ T7585] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 348.356490][ T7585] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 348.406581][ T7585] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 348.430592][ T7617] loop2: detected capacity change from 0 to 1024 [ 348.462648][ T7585] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 348.515084][ T7585] BTRFS error (device loop3): open_ctree failed: -12 [ 351.529165][ T7640] IPVS: rr: FWM 3 0x00000003 - no destination available [ 360.473348][ T8] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 360.683686][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 360.716125][ T8] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 360.739925][ T8] usb 1-1: config 179 has no interface number 0 [ 360.758155][ T8] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 360.793306][ T8] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 360.840713][ T8] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 360.897478][ T8] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 360.926471][ T8] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 360.971135][ T8] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 360.998861][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.189269][ T7701] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 363.184632][ T8] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input6 [ 363.484897][ T9] usb 1-1: USB disconnect, device number 6 [ 363.484979][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 363.485035][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 363.548613][ T9] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 363.574087][ T7714] loop2: detected capacity change from 0 to 128 [ 363.709291][ T7714] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 363.756531][ T7714] hpfs: filesystem error: improperly stopped [ 364.563569][ T7714] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 364.572220][ T7714] hpfs: You really don't want any checks? You are crazy... [ 364.694306][ T7714] hpfs: hpfs_map_sector(): read error [ 364.703170][ T7714] hpfs: code page support is disabled [ 365.599869][ T7714] hpfs: hpfs_map_4sectors(): unaligned read [ 365.652181][ T7714] hpfs: hpfs_map_4sectors(): unaligned read [ 365.682087][ T7714] hpfs: filesystem error: unable to find root dir [ 365.854311][ T7727] loop1: detected capacity change from 0 to 2048 [ 365.917510][ T7727] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 366.047519][ T7730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.486'. [ 366.096958][ T7730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.486'. [ 366.136125][ T7730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.486'. [ 366.207865][ T7730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.486'. [ 366.252910][ T7730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.486'. [ 366.287677][ T7730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.486'. [ 366.301894][ T7730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.486'. [ 366.342394][ T7730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.486'. [ 366.378100][ T7730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.486'. [ 366.393661][ T7730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.486'. [ 368.223081][ T7736] loop1: detected capacity change from 0 to 32768 [ 369.982205][ T7736] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 370.152932][ T5795] ocfs2: Unmounting device (7,1) on (node local) [ 370.840510][ T7748] loop3: detected capacity change from 0 to 32768 [ 370.953755][ T7748] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 371.256551][ T7748] XFS (loop3): Ending clean mount [ 371.463822][ T7748] XFS (loop3): Quotacheck needed: Please wait. [ 371.728842][ T7748] XFS (loop3): Quotacheck: Done. [ 371.821357][ T5789] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 374.739909][ T7795] loop1: detected capacity change from 0 to 1024 [ 375.781289][ T7803] loop3: detected capacity change from 0 to 2048 [ 376.030200][ T7803] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 376.171989][ T7813] loop1: detected capacity change from 0 to 4096 [ 376.600004][ T7817] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 376.828471][ T7819] loop0: detected capacity change from 0 to 1024 [ 376.869387][ T7819] EXT4-fs: Ignoring removed orlov option [ 376.939726][ T28] audit: type=1800 audit(1759214161.687:5): pid=7820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.510" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 377.025420][ T7819] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 377.083660][ T7819] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 377.112723][ T28] audit: type=1800 audit(1759214161.847:6): pid=7813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.510" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 377.209585][ T7819] EXT4-fs error (device loop0): ext4_map_blocks:718: inode #15: comm syz.0.513: lblock 0 mapped to illegal pblock 0 (length 6) [ 377.477909][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 378.681481][ T7837] __nla_validate_parse: 43 callbacks suppressed [ 378.681507][ T7837] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.517'. [ 378.998272][ T28] audit: type=1800 audit(1759214163.747:7): pid=7826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.510" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 379.019678][ T7826] syz.1.510 (7826) used greatest stack depth: 19440 bytes left [ 379.249454][ T7841] loop0: detected capacity change from 0 to 1024 [ 379.849393][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.856067][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.514797][ T7851] process 'syz.3.521' launched './file1' with NULL argv: empty string added [ 380.651749][ T7857] IPVS: rr: FWM 3 0x00000003 - no destination available [ 381.548717][ T7865] loop0: detected capacity change from 0 to 128 [ 381.682387][ T7865] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 381.942603][ T7865] hpfs: filesystem error: improperly stopped [ 382.052777][ T7865] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 382.216908][ T7865] hpfs: You really don't want any checks? You are crazy... [ 382.307679][ T7865] hpfs: hpfs_map_sector(): read error [ 382.339134][ T7865] hpfs: code page support is disabled [ 382.349297][ T5797] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 382.392207][ T7865] hpfs: hpfs_map_4sectors(): unaligned read [ 382.444768][ T7865] hpfs: hpfs_map_4sectors(): unaligned read [ 382.450943][ T7865] hpfs: filesystem error: unable to find root dir [ 382.588743][ T5797] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 383.556365][ T5797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.622026][ T5797] usb 3-1: Product: syz [ 383.632998][ T5797] usb 3-1: Manufacturer: syz [ 383.666418][ T5797] usb 3-1: SerialNumber: syz [ 383.674069][ T7877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.525'. [ 383.700564][ T5797] usb 3-1: config 0 descriptor?? [ 383.715300][ T7877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.525'. [ 383.770733][ T7877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.525'. [ 383.812932][ T7877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.525'. [ 383.844996][ T7877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.525'. [ 383.865471][ T7877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.525'. [ 383.881686][ T7877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.525'. [ 383.893348][ T7877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.525'. [ 383.915175][ T7877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.525'. [ 383.933368][ T7877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.525'. [ 383.940858][ T5797] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 383.962854][ T7877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.525'. [ 385.129155][ T7893] loop0: detected capacity change from 0 to 1024 [ 385.195277][ T5797] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32 [ 385.214459][ T5797] usb 3-1: USB disconnect, device number 8 [ 386.197263][ T7899] loop1: detected capacity change from 0 to 2048 [ 386.659052][ T7899] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 387.029916][ T7911] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20004 [ 389.643460][ T5797] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 389.870527][ T5797] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 389.910845][ T5797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.951575][ T5797] usb 1-1: Product: syz [ 389.970517][ T5797] usb 1-1: Manufacturer: syz [ 389.992405][ T5797] usb 1-1: SerialNumber: syz [ 390.026644][ T5797] usb 1-1: config 0 descriptor?? [ 390.555457][ T5797] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 391.523411][ T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 391.771707][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.833380][ T5797] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -32 [ 391.846582][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.869223][ T5797] usb 1-1: USB disconnect, device number 7 [ 391.885585][ T8] usb 4-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 391.905552][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.938555][ T8] usb 4-1: config 0 descriptor?? [ 392.482713][ T8] usbhid 4-1:0.0: can't add hid device: -71 [ 392.505679][ T8] usbhid: probe of 4-1:0.0 failed with error -71 [ 392.530472][ T8] usb 4-1: USB disconnect, device number 3 [ 392.909940][ T7961] __nla_validate_parse: 45 callbacks suppressed [ 392.909959][ T7961] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.551'. [ 396.036864][ T7985] loop3: detected capacity change from 0 to 4096 [ 396.138528][ T7989] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 396.203398][ T5797] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 396.264893][ T28] audit: type=1800 audit(1759214181.017:8): pid=7985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.558" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 396.377919][ T28] audit: type=1800 audit(1759214181.037:9): pid=7985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.558" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 396.467788][ T5797] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 396.478036][ T5797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.513910][ T5797] usb 3-1: Product: syz [ 396.518361][ T5797] usb 3-1: Manufacturer: syz [ 396.562503][ T5797] usb 3-1: SerialNumber: syz [ 396.594801][ T5797] usb 3-1: config 0 descriptor?? [ 396.832611][ T5797] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 397.177126][ T28] audit: type=1800 audit(1759214181.927:10): pid=7985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.558" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 398.122841][ T5797] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32 [ 398.326249][ T5797] usb 3-1: USB disconnect, device number 9 [ 398.737020][ T8010] loop1: detected capacity change from 0 to 1024 [ 399.206015][ T8015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.569'. [ 399.216311][ T8015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.569'. [ 399.226078][ T8015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.569'. [ 399.236331][ T8015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.569'. [ 399.245435][ T8015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.569'. [ 399.255154][ T8015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.569'. [ 399.267389][ T8015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.569'. [ 399.278058][ T8015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.569'. [ 399.291528][ T8015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.569'. [ 399.301595][ T8015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.569'. [ 400.443956][ T8025] loop3: detected capacity change from 0 to 2048 [ 400.470051][ T8025] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 400.961124][ T8033] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20004 [ 402.660485][ T8050] loop0: detected capacity change from 0 to 1024 [ 403.816816][ T8062] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20004 [ 403.901494][ T8064] loop2: detected capacity change from 0 to 2048 [ 404.492145][ T8064] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 405.681752][ T8082] loop1: detected capacity change from 0 to 4096 [ 405.768542][ T8087] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 405.855492][ T28] audit: type=1800 audit(1759214190.607:11): pid=8082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.590" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 406.051856][ T28] audit: type=1800 audit(1759214190.647:12): pid=8082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.590" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 406.300381][ T8092] loop3: detected capacity change from 0 to 1024 [ 406.692146][ T28] audit: type=1800 audit(1759214191.407:13): pid=8082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.590" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 407.056836][ T8096] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20004 [ 408.482550][ T8108] loop0: detected capacity change from 0 to 2048 [ 408.545747][ T8108] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 409.035160][ T8118] IPVS: rr: FWM 3 0x00000003 - no destination available [ 409.152621][ T8109] loop2: detected capacity change from 0 to 32768 [ 409.198738][ T8120] loop3: detected capacity change from 0 to 1024 [ 409.748856][ T8109] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 411.414603][ T8141] __nla_validate_parse: 44 callbacks suppressed [ 411.414635][ T8141] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.608'. [ 413.150561][ T5794] (syz-executor,5794,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 413.200971][ T5794] ocfs2: Unmounting device (7,2) on (node local) [ 414.044652][ T8161] comedi comedi3: comedi_config --init_data is deprecated [ 414.564317][ T8164] loop2: detected capacity change from 0 to 4096 [ 414.870778][ T8168] loop1: detected capacity change from 0 to 1024 [ 415.992470][ T8177] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.617'. [ 416.533559][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 416.782361][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.804676][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.818291][ T9] usb 1-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 416.840087][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.877704][ T9] usb 1-1: config 0 descriptor?? [ 417.825477][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 417.870680][ T9] usbhid: probe of 1-1:0.0 failed with error -71 [ 417.944201][ T8199] loop1: detected capacity change from 0 to 2048 [ 417.987634][ T9] usb 1-1: USB disconnect, device number 8 [ 418.034372][ T8199] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 418.879083][ T8203] loop1: detected capacity change from 0 to 128 [ 418.914824][ T8203] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 418.979552][ T8203] hpfs: filesystem error: improperly stopped [ 419.030106][ T8203] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 419.097320][ T8203] hpfs: You really don't want any checks? You are crazy... [ 419.129116][ T8203] hpfs: hpfs_map_sector(): read error [ 419.167016][ T8203] hpfs: code page support is disabled [ 419.172708][ T8203] hpfs: hpfs_map_4sectors(): unaligned read [ 419.244346][ T8203] hpfs: hpfs_map_4sectors(): unaligned read [ 419.250609][ T8203] hpfs: filesystem error: unable to find root dir [ 420.351333][ T8212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.625'. [ 420.419147][ T8212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.625'. [ 420.438393][ T8212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.625'. [ 420.450179][ T8214] loop0: detected capacity change from 0 to 1024 [ 420.522957][ T8212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.625'. [ 420.558608][ T8212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.625'. [ 420.609665][ T8212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.625'. [ 420.636181][ T8212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.625'. [ 420.656972][ T8212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.625'. [ 420.866840][ T8212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.625'. [ 420.878313][ T8212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.625'. [ 422.459881][ T8234] loop0: detected capacity change from 0 to 512 [ 422.507028][ T6572] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 425.405223][ T5797] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 425.723948][ T5797] usb 3-1: Using ep0 maxpacket: 32 [ 426.096778][ T5797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.133735][ T5797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.147940][ T5797] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 426.158575][ T5797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.176722][ T5797] usb 3-1: config 0 descriptor?? [ 426.703802][ T5797] ft260 0003:0403:6030.0001: unknown main item tag 0x7 [ 426.836294][ T5797] ft260 0003:0403:6030.0001: chip code: 0000 0000 [ 426.993339][ T23] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 427.037319][ T5797] ft260 0003:0403:6030.0001: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 427.213376][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 427.220893][ T23] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 427.230224][ T23] usb 2-1: config 179 has no interface number 0 [ 427.249481][ T5797] ft260 0003:0403:6030.0001: failed to retrieve status: -32, no wakeup [ 427.253513][ T23] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 427.313264][ T23] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 427.339019][ T23] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 427.380899][ T23] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 427.406138][ T23] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 427.421861][ T23] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 427.431875][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.465672][ T8267] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 428.374226][ T6904] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input7 [ 428.488465][ T5797] usb 3-1: USB disconnect, device number 10 [ 428.572884][ T8277] loop3: detected capacity change from 0 to 128 [ 428.598444][ T8] usb 2-1: USB disconnect, device number 5 [ 428.598461][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 428.598603][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 428.607634][ T8277] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 428.649964][ T8] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 428.675833][ T8277] hpfs: filesystem error: improperly stopped [ 428.682129][ T8277] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 428.747210][ T8277] hpfs: You really don't want any checks? You are crazy... [ 428.768885][ T8277] hpfs: hpfs_map_sector(): read error [ 428.796082][ T8277] hpfs: code page support is disabled [ 428.819804][ T8277] hpfs: hpfs_map_4sectors(): unaligned read [ 428.845679][ T8277] hpfs: hpfs_map_4sectors(): unaligned read [ 428.858473][ T8277] hpfs: filesystem error: unable to find root dir [ 429.929028][ T8289] __nla_validate_parse: 44 callbacks suppressed [ 429.929047][ T8289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.646'. [ 430.775350][ T8289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.646'. [ 430.853498][ T8289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.646'. [ 430.862464][ T8289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.646'. [ 430.890872][ T8289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.646'. [ 430.904836][ T8289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.646'. [ 430.956073][ T8289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.646'. [ 430.979998][ T8289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.646'. [ 431.009162][ T8289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.646'. [ 431.021369][ T8289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.646'. [ 431.743513][ T6904] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 431.935580][ T6904] usb 3-1: device descriptor read/64, error -71 [ 431.997841][ T8309] loop1: detected capacity change from 0 to 2048 [ 432.056616][ T8309] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 432.253560][ T6904] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 432.754362][ T6904] usb 3-1: device descriptor read/64, error -71 [ 433.042766][ T6904] usb usb3-port1: attempt power cycle [ 433.494543][ T6904] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 433.728072][ T6904] usb 3-1: device descriptor read/8, error -71 [ 436.024440][ T23] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 436.233761][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 436.264484][ T23] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 436.286908][ T23] usb 4-1: config 179 has no interface number 0 [ 436.296751][ T23] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 436.311584][ T23] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 436.335254][ T23] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 436.350452][ T23] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 436.380081][ T23] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 436.400146][ T23] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 436.418089][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.441797][ T8324] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 436.695370][ T23] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input8 [ 436.703584][ T5863] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 436.896115][ T5863] usb 1-1: Using ep0 maxpacket: 32 [ 436.934550][ T5863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.965199][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 436.965212][ T8] usb 4-1: USB disconnect, device number 4 [ 436.977587][ T5863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.990679][ T8] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 437.053959][ T5863] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 437.108881][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.150366][ T5863] usb 1-1: config 0 descriptor?? [ 437.238026][ T8343] loop2: detected capacity change from 0 to 512 [ 437.246539][ T8341] loop1: detected capacity change from 0 to 4096 [ 437.267171][ T8343] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 437.295323][ T8343] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 437.304526][ T8343] System zones: 0-1, 15-15, 18-18, 34-34 [ 437.310867][ T8343] EXT4-fs (loop2): orphan cleanup on readonly fs [ 437.320224][ T8343] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 437.331137][ T8343] EXT4-fs warning (device loop2): ext4_enable_quotas:7175: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 437.347340][ T8343] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 437.365465][ T8343] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.666: bg 0: block 40: padding at end of block bitmap is not set [ 437.394850][ T8343] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6637: Corrupt filesystem [ 437.406140][ T8343] EXT4-fs (loop2): 1 truncate cleaned up [ 437.411911][ T8345] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 437.428315][ T8343] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 437.459931][ T28] audit: type=1800 audit(1759214222.207:14): pid=8341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.665" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 437.503475][ T28] audit: type=1800 audit(1759214222.207:15): pid=8341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.665" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 437.518376][ T8343] EXT4-fs error (device loop2): ext4_encrypted_get_link:46: inode #16: comm syz.2.666: bad symlink. [ 437.632786][ T5863] ft260 0003:0403:6030.0002: unknown main item tag 0x7 [ 437.689865][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.711045][ T5863] ft260 0003:0403:6030.0002: chip code: 0000 0000 [ 439.080351][ T5863] ft260 0003:0403:6030.0002: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 439.323256][ T5863] ft260 0003:0403:6030.0002: failed to retrieve status: -32, no wakeup [ 440.435724][ T5797] usb 1-1: reset high-speed USB device number 9 using dummy_hcd [ 441.158429][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.165453][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.196771][ T5863] usb 1-1: USB disconnect, device number 9 [ 442.763535][ T5863] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 443.643514][ T5863] usb 1-1: Using ep0 maxpacket: 16 [ 443.676418][ T5863] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 443.693570][ T5863] usb 1-1: config 0 has no interface number 0 [ 443.710182][ T5863] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 443.743536][ T5863] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 443.763667][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 443.793288][ T5863] usb 1-1: Product: syz [ 443.808208][ T5863] usb 1-1: SerialNumber: syz [ 443.836378][ T5863] usb 1-1: config 0 descriptor?? [ 443.866272][ T5863] cm109 1-1:0.8: invalid payload size 34, expected 4 [ 443.897167][ T5863] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input9 [ 445.436909][ T8402] loop3: detected capacity change from 0 to 2048 [ 445.509499][ T8402] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 445.615653][ C0] cm109 1-1:0.8: cm109_urb_irq_callback: urb status -71 [ 445.615891][ T6904] usb 1-1: USB disconnect, device number 10 [ 445.622779][ C0] ------------[ cut here ]------------ [ 445.634775][ C0] URB ffff88802ffba500 submitted while active [ 445.641420][ C0] WARNING: CPU: 0 PID: 3459 at drivers/usb/core/urb.c:379 usb_submit_urb+0xf35/0x17d0 [ 445.651242][ C0] Modules linked in: [ 445.655324][ C0] CPU: 0 PID: 3459 Comm: kworker/u4:8 Not tainted syzkaller #0 [ 445.663009][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 445.673461][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 445.680282][ C0] RIP: 0010:usb_submit_urb+0xf35/0x17d0 [ 445.685867][ C0] Code: 4a 8b 44 89 fa e8 bb ac 17 04 e9 28 fc ff ff e8 81 22 36 fb c6 05 46 b4 e5 07 01 48 c7 c7 c0 d7 4a 8b 48 89 de e8 db 96 00 fb <0f> 0b e9 45 f1 ff ff e8 5f 22 36 fb eb 11 e8 58 22 36 fb bd 80 00 [ 445.705771][ C0] RSP: 0018:ffffc90000007868 EFLAGS: 00010046 [ 445.712136][ C0] RAX: c9e5132275673f00 RBX: ffff88802ffba500 RCX: 0000000000040000 [ 445.720155][ C0] RDX: ffffc900020a2000 RSI: 00000000000188cb RDI: 00000000000188cc [ 445.728433][ C0] RBP: 000000000000000f R08: ffffc90000007467 R09: 1ffff92000000e8c [ 445.736988][ C0] R10: dffffc0000000000 R11: fffff52000000e8d R12: dffffc0000000000 [ 445.745008][ C0] R13: ffff888077b52030 R14: ffff88802ffba508 R15: 0000000000000820 [ 445.753107][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 445.762538][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 445.769419][ C0] CR2: 00007f90f8fe1000 CR3: 000000002d538000 CR4: 00000000003526f0 [ 445.777607][ C0] Call Trace: [ 445.780908][ C0] [ 445.783875][ C0] ? _raw_spin_lock+0x40/0x40 [ 445.788629][ C0] ? kcov_remote_start+0x8f/0x7f0 [ 445.793685][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 445.798909][ C0] cm109_urb_irq_callback+0x72c/0xc90 [ 445.804522][ C0] __usb_hcd_giveback_urb+0x35f/0x520 [ 445.809953][ C0] dummy_timer+0x8a3/0x31b0 [ 445.814612][ C0] ? mark_lock+0x94/0x320 [ 445.819067][ C0] ? lock_chain_count+0x20/0x20 [ 445.824040][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 445.830418][ C0] ? dummy_free_streams+0x530/0x530 [ 445.835637][ C0] ? debug_object_deactivate+0x67/0x350 [ 445.841221][ C0] __hrtimer_run_queues+0x51e/0xc40 [ 445.846765][ C0] ? dummy_free_streams+0x530/0x530 [ 445.852059][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 445.857386][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 445.863776][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 445.869095][ C0] handle_softirqs+0x280/0x820 [ 445.873914][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 445.878966][ C0] ? do_softirq+0x180/0x180 [ 445.883507][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 445.888851][ C0] __irq_exit_rcu+0xc7/0x190 [ 445.893463][ C0] ? irq_exit_rcu+0x20/0x20 [ 445.898340][ C0] irq_exit_rcu+0x9/0x20 [ 445.902865][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 445.908649][ C0] [ 445.911599][ C0] [ 445.914657][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 445.920941][ C0] RIP: 0010:unwind_next_frame+0x1622/0x2970 [ 445.926977][ C0] Code: 00 49 89 c6 48 8b 44 24 40 42 80 3c 28 00 48 8b 5c 24 20 74 08 48 89 df e8 8b 2a a2 00 4c 89 33 48 8b 44 24 68 42 80 3c 28 00 <48> 8b 5c 24 60 74 08 48 89 df e8 6f 2a a2 00 48 8b 44 24 08 48 89 [ 445.947006][ C0] RSP: 0018:ffffc9000c5074d8 EFLAGS: 00000246 [ 445.953105][ C0] RAX: 1ffff920018a0ebc RBX: ffffc9000c5075f0 RCX: ffff88802d5d9e00 [ 445.961398][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffc9000c507968 [ 445.970125][ C0] RBP: ffffc9000c5075f8 R08: ffff88802d5d9e00 R09: 0000000000000003 [ 445.978863][ C0] R10: 0000000000000004 R11: 0000000000000000 R12: ffffc9000c5075a8 [ 445.987068][ C0] R13: dffffc0000000000 R14: ffffffff81dc9180 R15: ffffffff8ed9393e [ 445.995248][ C0] ? slab_free_freelist_hook+0x130/0x1b0 [ 446.001030][ C0] ? unwind_next_frame+0x15f9/0x2970 [ 446.006363][ C0] ? ____kasan_slab_free+0x126/0x1e0 [ 446.011805][ C0] ? ____kasan_slab_free+0x126/0x1e0 [ 446.017131][ C0] ? stack_trace_save+0xe0/0xe0 [ 446.022007][ C0] arch_stack_walk+0x144/0x190 [ 446.026890][ C0] ? slab_free_freelist_hook+0x130/0x1b0 [ 446.032690][ C0] stack_trace_save+0x9c/0xe0 [ 446.037635][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 446.043092][ C0] ? chacha_block_generic+0xae/0xda0 [ 446.048649][ C0] kasan_set_track+0x4e/0x70 [ 446.053356][ C0] ? kasan_set_track+0x4e/0x70 [ 446.058189][ C0] ? kasan_save_free_info+0x2e/0x50 [ 446.063784][ C0] ? ____kasan_slab_free+0x126/0x1e0 [ 446.069464][ C0] ? __kmem_cache_free+0xba/0x1f0 [ 446.074641][ C0] kasan_save_free_info+0x2e/0x50 [ 446.079708][ C0] ____kasan_slab_free+0x126/0x1e0 [ 446.085201][ C0] slab_free_freelist_hook+0x130/0x1b0 [ 446.090705][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 446.096729][ C0] ? skb_release_data+0x634/0x800 [ 446.102053][ C0] __kmem_cache_free+0xba/0x1f0 [ 446.107120][ C0] skb_release_data+0x634/0x800 [ 446.112193][ C0] consume_skb+0xb2/0x110 [ 446.116570][ C0] nsim_dev_trap_report_work+0x76f/0xb00 [ 446.122389][ C0] ? process_scheduled_works+0x957/0x15b0 [ 446.128356][ C0] process_scheduled_works+0xa45/0x15b0 [ 446.134255][ C0] ? assign_work+0x400/0x400 [ 446.139075][ C0] ? assign_work+0x39e/0x400 [ 446.143869][ C0] worker_thread+0xa55/0xfc0 [ 446.148619][ C0] kthread+0x2fa/0x390 [ 446.153046][ C0] ? pr_cont_work+0x560/0x560 [ 446.157774][ C0] ? kthread_blkcg+0xd0/0xd0 [ 446.162596][ C0] ret_from_fork+0x48/0x80 [ 446.167798][ C0] ? kthread_blkcg+0xd0/0xd0 [ 446.172615][ C0] ret_from_fork_asm+0x11/0x20 [ 446.177791][ C0] [ 446.180981][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 446.188549][ C0] CPU: 0 PID: 3459 Comm: kworker/u4:8 Not tainted syzkaller #0 [ 446.197048][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 446.207717][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 446.214624][ C0] Call Trace: [ 446.218011][ C0] [ 446.220870][ C0] dump_stack_lvl+0x16c/0x230 [ 446.225602][ C0] ? show_regs_print_info+0x20/0x20 [ 446.231440][ C0] ? load_image+0x3b0/0x3b0 [ 446.237154][ C0] panic+0x2c0/0x710 [ 446.241870][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 446.246673][ C0] ? ret_from_fork_asm+0x11/0x20 [ 446.251829][ C0] __warn+0x2e0/0x470 [ 446.255837][ C0] ? usb_submit_urb+0xf35/0x17d0 [ 446.261077][ C0] ? usb_submit_urb+0xf35/0x17d0 [ 446.266230][ C0] report_bug+0x2be/0x4f0 [ 446.270781][ C0] ? usb_submit_urb+0xf35/0x17d0 [ 446.276343][ C0] ? usb_submit_urb+0xf35/0x17d0 [ 446.281324][ C0] ? usb_submit_urb+0xf37/0x17d0 [ 446.286807][ C0] handle_bug+0xcf/0x120 [ 446.291089][ C0] exc_invalid_op+0x1a/0x50 [ 446.295624][ C0] asm_exc_invalid_op+0x1a/0x20 [ 446.300507][ C0] RIP: 0010:usb_submit_urb+0xf35/0x17d0 [ 446.306625][ C0] Code: 4a 8b 44 89 fa e8 bb ac 17 04 e9 28 fc ff ff e8 81 22 36 fb c6 05 46 b4 e5 07 01 48 c7 c7 c0 d7 4a 8b 48 89 de e8 db 96 00 fb <0f> 0b e9 45 f1 ff ff e8 5f 22 36 fb eb 11 e8 58 22 36 fb bd 80 00 [ 446.326703][ C0] RSP: 0018:ffffc90000007868 EFLAGS: 00010046 [ 446.332975][ C0] RAX: c9e5132275673f00 RBX: ffff88802ffba500 RCX: 0000000000040000 [ 446.341594][ C0] RDX: ffffc900020a2000 RSI: 00000000000188cb RDI: 00000000000188cc [ 446.349778][ C0] RBP: 000000000000000f R08: ffffc90000007467 R09: 1ffff92000000e8c [ 446.358030][ C0] R10: dffffc0000000000 R11: fffff52000000e8d R12: dffffc0000000000 [ 446.366410][ C0] R13: ffff888077b52030 R14: ffff88802ffba508 R15: 0000000000000820 [ 446.374964][ C0] ? usb_submit_urb+0xf35/0x17d0 [ 446.379997][ C0] ? _raw_spin_lock+0x40/0x40 [ 446.384897][ C0] ? kcov_remote_start+0x8f/0x7f0 [ 446.389964][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 446.395412][ C0] cm109_urb_irq_callback+0x72c/0xc90 [ 446.401091][ C0] __usb_hcd_giveback_urb+0x35f/0x520 [ 446.406763][ C0] dummy_timer+0x8a3/0x31b0 [ 446.411351][ C0] ? mark_lock+0x94/0x320 [ 446.415724][ C0] ? lock_chain_count+0x20/0x20 [ 446.420723][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 446.426979][ C0] ? dummy_free_streams+0x530/0x530 [ 446.432826][ C0] ? debug_object_deactivate+0x67/0x350 [ 446.438526][ C0] __hrtimer_run_queues+0x51e/0xc40 [ 446.443945][ C0] ? dummy_free_streams+0x530/0x530 [ 446.449793][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 446.454955][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 446.461283][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 446.467037][ C0] handle_softirqs+0x280/0x820 [ 446.472522][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 446.477663][ C0] ? do_softirq+0x180/0x180 [ 446.482243][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 446.487771][ C0] __irq_exit_rcu+0xc7/0x190 [ 446.492624][ C0] ? irq_exit_rcu+0x20/0x20 [ 446.497193][ C0] irq_exit_rcu+0x9/0x20 [ 446.501464][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 446.507135][ C0] [ 446.510230][ C0] [ 446.513210][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 446.519333][ C0] RIP: 0010:unwind_next_frame+0x1622/0x2970 [ 446.526304][ C0] Code: 00 49 89 c6 48 8b 44 24 40 42 80 3c 28 00 48 8b 5c 24 20 74 08 48 89 df e8 8b 2a a2 00 4c 89 33 48 8b 44 24 68 42 80 3c 28 00 <48> 8b 5c 24 60 74 08 48 89 df e8 6f 2a a2 00 48 8b 44 24 08 48 89 [ 446.546677][ C0] RSP: 0018:ffffc9000c5074d8 EFLAGS: 00000246 [ 446.552962][ C0] RAX: 1ffff920018a0ebc RBX: ffffc9000c5075f0 RCX: ffff88802d5d9e00 [ 446.560961][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffc9000c507968 [ 446.568996][ C0] RBP: ffffc9000c5075f8 R08: ffff88802d5d9e00 R09: 0000000000000003 [ 446.577293][ C0] R10: 0000000000000004 R11: 0000000000000000 R12: ffffc9000c5075a8 [ 446.585905][ C0] R13: dffffc0000000000 R14: ffffffff81dc9180 R15: ffffffff8ed9393e [ 446.594095][ C0] ? slab_free_freelist_hook+0x130/0x1b0 [ 446.599976][ C0] ? unwind_next_frame+0x15f9/0x2970 [ 446.605461][ C0] ? ____kasan_slab_free+0x126/0x1e0 [ 446.610954][ C0] ? ____kasan_slab_free+0x126/0x1e0 [ 446.616575][ C0] ? stack_trace_save+0xe0/0xe0 [ 446.621542][ C0] arch_stack_walk+0x144/0x190 [ 446.626336][ C0] ? slab_free_freelist_hook+0x130/0x1b0 [ 446.632094][ C0] stack_trace_save+0x9c/0xe0 [ 446.637063][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 446.642229][ C0] ? chacha_block_generic+0xae/0xda0 [ 446.647664][ C0] kasan_set_track+0x4e/0x70 [ 446.652298][ C0] ? kasan_set_track+0x4e/0x70 [ 446.657392][ C0] ? kasan_save_free_info+0x2e/0x50 [ 446.663014][ C0] ? ____kasan_slab_free+0x126/0x1e0 [ 446.668543][ C0] ? __kmem_cache_free+0xba/0x1f0 [ 446.673621][ C0] kasan_save_free_info+0x2e/0x50 [ 446.679046][ C0] ____kasan_slab_free+0x126/0x1e0 [ 446.684495][ C0] slab_free_freelist_hook+0x130/0x1b0 [ 446.690119][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 446.696336][ C0] ? skb_release_data+0x634/0x800 [ 446.701507][ C0] __kmem_cache_free+0xba/0x1f0 [ 446.706489][ C0] skb_release_data+0x634/0x800 [ 446.711387][ C0] consume_skb+0xb2/0x110 [ 446.715845][ C0] nsim_dev_trap_report_work+0x76f/0xb00 [ 446.721785][ C0] ? process_scheduled_works+0x957/0x15b0 [ 446.727623][ C0] process_scheduled_works+0xa45/0x15b0 [ 446.733306][ C0] ? assign_work+0x400/0x400 [ 446.737924][ C0] ? assign_work+0x39e/0x400 [ 446.742821][ C0] worker_thread+0xa55/0xfc0 [ 446.747721][ C0] kthread+0x2fa/0x390 [ 446.751894][ C0] ? pr_cont_work+0x560/0x560 [ 446.757204][ C0] ? kthread_blkcg+0xd0/0xd0 [ 446.761811][ C0] ret_from_fork+0x48/0x80 [ 446.766427][ C0] ? kthread_blkcg+0xd0/0xd0 [ 446.771227][ C0] ret_from_fork_asm+0x11/0x20 [ 446.776033][ C0] [ 446.779485][ C0] Kernel Offset: disabled [ 446.783958][ C0] Rebooting in 86400 seconds..