last executing test programs: 39.702761891s ago: executing program 0 (id=285): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) syz_usb_connect(0x3, 0x8c6, &(0x7f00000000c0)=ANY=[], 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 36.467570803s ago: executing program 0 (id=298): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x2000000000000116, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) io_pgetevents(0x0, 0x2, 0x0, 0x0, 0x0, 0x0) 36.185178408s ago: executing program 0 (id=302): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)) r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a00", 0x6}], 0x1}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040)) 35.825474184s ago: executing program 3 (id=306): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000300)={0x0, 0x0, 0x2c, 0x20, 0x104, 0x1}) 35.675856276s ago: executing program 3 (id=308): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x44, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x9, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x40c4) 35.477395919s ago: executing program 1 (id=309): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x3, 0x3ff, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x2, 0x3, 0x2000079, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0xc0000000, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], [0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x3b, 0x0, &(0x7f0000000240), &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0xe2, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000280)={{0x5}, 'syz1\x00', 0x10}) ioctl$UI_DEV_CREATE(r5, 0x5501) ioctl$UI_DEV_DESTROY(r5, 0x5502) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [], {0x14}}, 0x28}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYRESHEX=r1, @ANYRES32, @ANYBLOB="0800000000001a0000e6fffffffffffaff0000257ee5ada9f442f96e4194e55afe779c28c240a732ada9b427dd1182f542b61d1c99bf9d9c3219ba0d8c07004be602af56a37b23ef469bb40b5c544eb7e7997279f744ff5cf6a7b6b61efa16b4fbe508317ef8ed00c1159eb9e3edd3514c83abff78", @ANYBLOB="18821deedf58b033674bfe2bfbd025aaa8507fcd8b71da7f2f86a781d1e42887f93969894e2f9ae92e455de83ee45b07a2be4173d2096e60e2ff9ce23f1e7a194e82f893cb6bf27e3aba601efe242bfcbcb2c876318fb523cf6143961f7cae4fe0a14ac4a836ae92dc426fdd7a565a9653f5e71f9550323463054cafe22e2d3963a965", @ANYBLOB="0100000002e4c30e00000000000000000000000000000000000000000000e17e08e426154bba210dffbe6cafabb96725e02504e4619bd8e67f2a7e35dd8471245dcf748f6362ccfa77f2af6776ca432a1f00"/91], 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r7 = open(&(0x7f00009e1000)='./file0\x00', 0x48062, 0x0) fcntl$setlease(r7, 0x400, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./file1\x00') 35.44500931s ago: executing program 3 (id=310): openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000040)=0xa, 0xd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0xffe4, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x8c, 0x30, 0xb, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x74, 0x1, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)) 34.565329674s ago: executing program 4 (id=312): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) r0 = syz_io_uring_setup(0x103b, &(0x7f0000000600)={0x0, 0x1078, 0x1100, 0x2, 0xffffffff}, 0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0xd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x400, 0x100, 0x0, {0x0, r2}}) io_uring_enter(r0, 0x3516, 0x483, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x18) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) close_range(r4, 0xffffffffffffffff, 0x0) 34.256158839s ago: executing program 4 (id=313): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)) close(r1) 34.049401152s ago: executing program 0 (id=314): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000380)=0xfffffffffffff800, 0x12) bind$vsock_stream(r0, &(0x7f0000000940), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{0x0}], 0x1) recvmmsg(r1, &(0x7f0000006d80)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/79, 0x4f}], 0x1}, 0x9}], 0x1, 0x40000160, 0x0) 33.899486335s ago: executing program 4 (id=315): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001bc0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r3}, 0x18) r4 = socket$rxrpc(0x21, 0x2, 0xa) recvmmsg(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}], 0x1, 0x140, 0x0) 33.748744107s ago: executing program 3 (id=317): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000001000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143142, 0xe0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) 33.637323909s ago: executing program 0 (id=318): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000008000000020000000400000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r5}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) close(r4) 33.591941s ago: executing program 4 (id=319): socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 33.051536178s ago: executing program 0 (id=322): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40025b0c, &(0x7f0000000040)) 32.990805199s ago: executing program 1 (id=323): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[@ANYBLOB="3c0200001900010026bd700000000000fc0200000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400084010500ac1414bb000000000000000000000000000000006c0000000000000000000000000000000000ffff7f0000010000000000032000000000000000000000000000fc0200000000000000000000000000000000000032"], 0x23c}}, 0x20000000) 32.758884063s ago: executing program 3 (id=325): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)) r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b", 0x7}], 0x1}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fsopen(0x0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040)) 32.697552774s ago: executing program 1 (id=326): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)) close(r1) 32.516638197s ago: executing program 1 (id=328): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = io_uring_setup(0x5f45, &(0x7f00000001c0)={0x0, 0x0, 0x2}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0x100}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x200, 0xa) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x800448d4, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 32.265292861s ago: executing program 1 (id=329): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r2}, 0x18) r3 = socket$rxrpc(0x21, 0x2, 0xa) recvmmsg(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}], 0x1, 0x140, 0x0) 32.150537193s ago: executing program 1 (id=330): r0 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 31.746486279s ago: executing program 2 (id=331): socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 31.629818621s ago: executing program 2 (id=332): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000200)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0xc, 0x100}}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x7, 0x18, 0x0, @wg=@data={0x4, 0xeab, 0x3}}}}}}, 0x0) 31.333578466s ago: executing program 2 (id=333): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x80000}, 0x18) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0xc80, &(0x7f0000020100)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x1, 0x27c, &(0x7f0000000600)="$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") syz_emit_ethernet(0x32, &(0x7f0000000040)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0xc, 0x100}}}}}}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 31.0641925s ago: executing program 4 (id=334): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x804, &(0x7f0000000440)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRESOCT], 0x1, 0x36e, &(0x7f0000000c00)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 31.056093781s ago: executing program 2 (id=335): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) 30.803899854s ago: executing program 3 (id=336): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000001000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143142, 0xe0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) 30.721490896s ago: executing program 2 (id=337): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) r0 = syz_io_uring_setup(0x103b, &(0x7f0000000600)={0x0, 0x1078, 0x1100, 0x2, 0xffffffff}, 0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0xd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x400, 0x100, 0x0, {0x0, r2}}) io_uring_enter(r0, 0x3516, 0x483, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x18) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) close_range(r4, 0xffffffffffffffff, 0x0) 30.721178586s ago: executing program 4 (id=338): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0xb0, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2, 0x9}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x1c, 0x2, 0x0, 0x1, [{0x4}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xfd}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xfffffff3}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xb0}}, 0x0) 30.585392908s ago: executing program 2 (id=339): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{0x0}], 0x1, 0x0, 0x0, 0x80020}], 0x1, 0x40c0) sendmmsg$inet_sctp(r1, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB='0\x00'], 0x30}], 0x1, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x14) syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r5, 0x0, 0xfffffffffffffffb}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) ioperm(0xc, 0x1ff, 0x8) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) r6 = socket(0x21, 0x803, 0x9) getsockopt$sock_buf(r6, 0x1, 0x2b, &(0x7f0000000000)=""/16, &(0x7f0000000480)=0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000003c0)='kfree\x00', r4}, 0x18) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r7, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r8 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) preadv(r8, &(0x7f0000000380)=[{&(0x7f0000000280)=""/240, 0xf0}], 0x1, 0x33, 0x2) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) 0s ago: executing program 32 (id=322): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40025b0c, &(0x7f0000000040)) kernel console output (not intermixed with test programs): ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.225507][ T2922] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.232717][ T2922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.248208][ T4268] Bluetooth: hci1: command 0x041b tx timeout [ 80.254536][ T4270] Bluetooth: hci2: command 0x041b tx timeout [ 80.260816][ T4263] Bluetooth: hci4: command 0x041b tx timeout [ 80.266876][ T4263] Bluetooth: hci0: command 0x041b tx timeout [ 80.278565][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.287953][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.296772][ T2922] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.303968][ T2922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.313845][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.322803][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.332017][ T2922] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.339114][ T2922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.374448][ T4258] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.389842][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.403073][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.411780][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.420813][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.429866][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.439432][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.448501][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.458987][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.468013][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.477460][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.487006][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.495714][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.504637][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.513640][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.522524][ T2922] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.529633][ T2922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.539747][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.568549][ T4252] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.580854][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.596392][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.609322][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.619445][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.633549][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.646467][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.656187][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.665131][ T2922] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.672311][ T2922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.683091][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.696813][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.708547][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.724809][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.738418][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.749737][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.763045][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.772654][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.788665][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.832368][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.887285][ T4253] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 80.926556][ T4253] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.958275][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.978274][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.003068][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.031512][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.044209][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.057480][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.075430][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.103225][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.147997][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.171112][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.209329][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.232290][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.256846][ T4258] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 81.280736][ T4258] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.310538][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.327346][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.338160][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.354543][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.368249][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.378421][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.386801][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.395200][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.419725][ T4252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.488400][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.524135][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.631609][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.652347][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.703538][ T4252] device veth0_vlan entered promiscuous mode [ 81.719066][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.728864][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.781432][ T4252] device veth1_vlan entered promiscuous mode [ 81.802100][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.812385][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.819967][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.891028][ T4255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.921401][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.931813][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.950037][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.958379][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.985853][ T4253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.020156][ T4252] device veth0_macvtap entered promiscuous mode [ 82.042514][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.058421][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.067428][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.084012][ T4252] device veth1_macvtap entered promiscuous mode [ 82.112241][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.120895][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.129642][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.141720][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.151274][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.160041][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.169455][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.178479][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.186939][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.208322][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.222969][ T4266] device veth0_vlan entered promiscuous mode [ 82.232565][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.240644][ T4263] Bluetooth: hci3: command 0x040f tx timeout [ 82.248255][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.255923][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.265383][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.275767][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.285109][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.293847][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.302553][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.317983][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.326887][ T4263] Bluetooth: hci0: command 0x040f tx timeout [ 82.330074][ T4252] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.335381][ T4263] Bluetooth: hci2: command 0x040f tx timeout [ 82.345960][ T4270] Bluetooth: hci1: command 0x040f tx timeout [ 82.348055][ T4268] Bluetooth: hci4: command 0x040f tx timeout [ 82.368326][ T4252] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.377823][ T4252] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.390532][ T4252] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.405520][ T4255] device veth0_vlan entered promiscuous mode [ 82.423190][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.432220][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.441652][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.450049][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.458933][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.467173][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.486083][ T4266] device veth1_vlan entered promiscuous mode [ 82.497420][ T4258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.511093][ T4255] device veth1_vlan entered promiscuous mode [ 82.523868][ T4253] device veth0_vlan entered promiscuous mode [ 82.583996][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.594113][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.602593][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.611896][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.620032][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.629644][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.638857][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.648637][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.669365][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.678082][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.698673][ T4255] device veth0_macvtap entered promiscuous mode [ 82.716674][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.726187][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.734749][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.746797][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.756348][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.766213][ T4253] device veth1_vlan entered promiscuous mode [ 82.783576][ T4255] device veth1_macvtap entered promiscuous mode [ 82.793636][ T4258] device veth0_vlan entered promiscuous mode [ 82.804783][ T4266] device veth0_macvtap entered promiscuous mode [ 82.832037][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.849856][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.860000][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.868364][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.881661][ T4258] device veth1_vlan entered promiscuous mode [ 82.892405][ T4266] device veth1_macvtap entered promiscuous mode [ 82.975936][ T4253] device veth0_macvtap entered promiscuous mode [ 82.987784][ T4255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.999386][ T4255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.012451][ T4255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.023100][ T4326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.038134][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.046511][ T4326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.056834][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.065773][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.074706][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.083908][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.100386][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.111286][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.124252][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.135353][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.147293][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.157349][ T4253] device veth1_macvtap entered promiscuous mode [ 83.177222][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.186563][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.196030][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.206381][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.219917][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.233669][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.246000][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.255480][ T4255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.267212][ T4255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.277790][ T4255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.289345][ T4255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.301245][ T4255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.317220][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.329504][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.338425][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.347180][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.370160][ T4255] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.382951][ T4255] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.392805][ T4255] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.405727][ T4255] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.425918][ T4266] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.435038][ T4266] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.445630][ T4266] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.454825][ T4266] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.474677][ T4258] device veth0_macvtap entered promiscuous mode [ 83.489995][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.493146][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.510199][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.518250][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.534107][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.545064][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.555156][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.565940][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.577911][ T4253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.586874][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.596365][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.606686][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.615688][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.627607][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.653599][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.664248][ T4258] device veth1_macvtap entered promiscuous mode [ 83.681014][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.692396][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.702824][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.713625][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.724997][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.736012][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.748417][ T4253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.775510][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.788888][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.801076][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.816146][ T4253] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.827571][ T4253] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.836697][ T4253] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.847861][ T4253] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.908747][ T4258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.938689][ T4258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.949192][ T4258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.959970][ T4258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.976216][ T4258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.987126][ T4258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.997451][ T4258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.016431][ T4258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.028451][ T4258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.067783][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.077258][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.089362][ T4258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.104381][ T4258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.115295][ T4258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.126170][ T4258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.136156][ T4258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.147793][ T4258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.157791][ T4258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.168905][ T4258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.180583][ T4258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.203815][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.216038][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.228134][ T4258] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.237345][ T4258] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.247194][ T4258] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.256184][ T4258] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.273585][ T2922] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.282641][ T2922] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.321028][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.330498][ T4270] Bluetooth: hci3: command 0x0419 tx timeout [ 84.353783][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.400698][ T4263] Bluetooth: hci2: command 0x0419 tx timeout [ 84.400820][ T4270] Bluetooth: hci1: command 0x0419 tx timeout [ 84.406758][ T4263] Bluetooth: hci4: command 0x0419 tx timeout [ 84.414222][ T4270] Bluetooth: hci0: command 0x0419 tx timeout [ 84.503710][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.530195][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.552100][ T4326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.555392][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.560116][ T4326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.584217][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.594654][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.605186][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.615157][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.625052][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.635092][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.692611][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.709781][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.730758][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.750892][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.773285][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.791586][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.845839][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.886171][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.928893][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.949200][ T4358] syz.0.7 uses obsolete (PF_INET,SOCK_PACKET) [ 85.015673][ T4356] loop3: detected capacity change from 0 to 128 [ 85.033645][ T4359] xt_connbytes: Forcing CT accounting to be enabled [ 85.073032][ T4359] Cannot find set identified by id 0 to match [ 85.240661][ T4356] loop3: detected capacity change from 0 to 512 [ 85.270641][ T4356] EXT4-fs: Invalid want_extra_isize 93 [ 85.300837][ T4359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 85.300869][ T4359] device gre0 entered promiscuous mode [ 85.513133][ T4365] loop2: detected capacity change from 0 to 1024 [ 85.717278][ T4369] loop0: detected capacity change from 0 to 1024 [ 85.741193][ T4365] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 85.816316][ T4369] ext4: Unknown parameter 'uid<00000000000000000000' [ 85.836365][ T4365] EXT4-fs (loop2): unmounting filesystem. [ 86.083935][ T4378] loop4: detected capacity change from 0 to 164 [ 86.230146][ T27] audit: type=1326 audit(1750753005.712:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4367 comm="syz.0.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e198e929 code=0x7ffc0000 [ 86.479466][ T27] audit: type=1326 audit(1750753005.782:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4367 comm="syz.0.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd0e198e929 code=0x7ffc0000 [ 86.536869][ T4378] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 86.585489][ T4374] xt_CT: You must specify a L4 protocol and not use inversions on it [ 86.767955][ T4373] loop3: detected capacity change from 0 to 1024 [ 86.803319][ T7] cfg80211: failed to load regulatory.db [ 86.820142][ T4364] loop2: detected capacity change from 0 to 1024 [ 86.890398][ T27] audit: type=1326 audit(1750753005.792:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4367 comm="syz.0.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e198e929 code=0x7ffc0000 [ 86.891400][ T4364] ======================================================= [ 86.891400][ T4364] WARNING: The mand mount option has been deprecated and [ 86.891400][ T4364] and is ignored by this kernel. Remove the mand [ 86.891400][ T4364] option from the mount to silence this warning. [ 86.891400][ T4364] ======================================================= [ 86.949151][ T4373] ext4: Unknown parameter 'uid<00000000000000000000' [ 87.053381][ T27] audit: type=1326 audit(1750753005.832:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4367 comm="syz.0.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd0e198e929 code=0x7ffc0000 [ 87.144980][ T4386] input: syz1 as /devices/virtual/input/input5 [ 87.172227][ T4384] 9pnet: p9_errstr2errno: server reported unknown error þLì²¼ O€!ÝëL [ 87.179086][ T27] audit: type=1326 audit(1750753005.842:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4367 comm="syz.0.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e198e929 code=0x7ffc0000 [ 87.214236][ T4364] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 87.435733][ T27] audit: type=1326 audit(1750753006.172:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4372 comm="syz.3.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68eb8e929 code=0x7ffc0000 [ 87.540534][ T27] audit: type=1326 audit(1750753006.172:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4372 comm="syz.3.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68eb8e929 code=0x7ffc0000 [ 87.590520][ T27] audit: type=1326 audit(1750753006.172:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4372 comm="syz.3.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe68eb8e929 code=0x7ffc0000 [ 87.692057][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 87.775193][ T27] audit: type=1326 audit(1750753006.172:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4372 comm="syz.3.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68eb8e929 code=0x7ffc0000 [ 88.065165][ T27] audit: type=1326 audit(1750753006.172:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4372 comm="syz.3.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68eb8e929 code=0x7ffc0000 [ 88.219537][ T4394] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 88.350487][ T4306] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 88.558187][ T4306] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 88.589409][ T4306] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 88.638815][ T4306] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 88.659518][ T4306] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.820332][ T951] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 88.894849][ T4306] usb 5-1: usb_control_msg returned -32 [ 88.908628][ T4306] usbtmc 5-1:16.0: can't read capabilities [ 89.135827][ T951] usb 4-1: device descriptor read/64, error -71 [ 89.450445][ T951] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 89.760761][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 89.770292][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 89.778514][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 89.786829][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 89.795044][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 89.803336][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 89.811558][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 89.819844][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 89.828058][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 89.836349][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 89.930729][ T951] usb 4-1: device descriptor read/64, error -71 [ 90.050986][ T951] usb usb4-port1: attempt power cycle [ 90.109058][ T4421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.120059][ T4421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.130130][ T4421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.140714][ T4421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.150686][ T4421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.202267][ T4421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.212459][ T4421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.223118][ T4421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.235977][ T4421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.302012][ T4421] device batadv_slave_0 entered promiscuous mode [ 90.923572][ T14] usb 5-1: USB disconnect, device number 2 [ 90.960849][ T951] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 91.015410][ T951] usb 4-1: device descriptor read/8, error -71 [ 91.166792][ T4429] netlink: 'syz.1.23': attribute type 280 has an invalid length. [ 91.204442][ T4432] netlink: 'syz.2.24': attribute type 27 has an invalid length. [ 91.310524][ T951] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 91.361261][ T951] usb 4-1: device descriptor read/8, error -71 [ 91.480980][ T951] usb usb4-port1: unable to enumerate USB device [ 91.931273][ T4440] input: syz1 as /devices/virtual/input/input6 [ 92.687822][ T4432] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.696490][ T4432] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.343788][ T4432] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.679912][ T4432] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.171358][ T4432] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.180668][ T4432] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.189635][ T4432] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.198595][ T4432] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.357354][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 96.366877][ T4433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.374826][ T4433] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.386607][ T4433] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 96.537462][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 96.568732][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 96.587345][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 96.607614][ T4463] device bridge_slave_0 left promiscuous mode [ 96.615625][ T4463] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.628655][ T4463] device bridge_slave_1 left promiscuous mode [ 96.641938][ T4463] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.652953][ T4463] bond0: (slave bond_slave_0): Releasing backup interface [ 96.691102][ T4463] bond0: (slave bond_slave_1): Releasing backup interface [ 96.761550][ T4463] team0: Port device team_slave_0 removed [ 96.814510][ T4463] team0: Port device team_slave_1 removed [ 96.833318][ T4463] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.881832][ T4463] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.912685][ T4463] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.925779][ T4463] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.941123][ T4306] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 96.963222][ T4467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.987988][ T4467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.008571][ T4467] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.022495][ T4467] device batadv_slave_0 entered promiscuous mode [ 97.152317][ T4306] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 97.169492][ T4306] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 97.189705][ T4306] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 97.199398][ T4306] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.210342][ T22] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 97.373554][ T22] usb 2-1: device descriptor read/64, error -71 [ 97.444538][ T4306] usb 1-1: usb_control_msg returned -32 [ 97.450176][ T4306] usbtmc 1-1:16.0: can't read capabilities [ 97.511091][ T7] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 97.700317][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 97.707614][ T7] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 97.754788][ T7] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 97.778948][ T7] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 97.802298][ T7] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 97.810380][ T22] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 97.818328][ T7] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 97.854907][ T7] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 97.865799][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.896836][ T7] usbtmc 4-1:16.0: bulk endpoints not found [ 98.004506][ T4345] usb 1-1: USB disconnect, device number 2 [ 98.010709][ T22] usb 2-1: device descriptor read/64, error -71 [ 98.140605][ T22] usb usb2-port1: attempt power cycle [ 98.550538][ T22] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 98.621301][ T22] usb 2-1: device descriptor read/8, error -71 [ 98.890485][ T22] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 98.954193][ T22] usb 2-1: device descriptor read/8, error -71 [ 98.988154][ T4500] netlink: 'syz.0.45': attribute type 10 has an invalid length. [ 98.996078][ T4500] netlink: 40 bytes leftover after parsing attributes in process `syz.0.45'. [ 99.094278][ T22] usb usb2-port1: unable to enumerate USB device [ 99.103703][ T4500] device dummy0 entered promiscuous mode [ 99.113279][ T4500] bridge0: port 3(dummy0) entered blocking state [ 99.120015][ T4500] bridge0: port 3(dummy0) entered disabled state [ 99.139437][ T4500] bridge0: port 3(dummy0) entered blocking state [ 99.146244][ T4500] bridge0: port 3(dummy0) entered forwarding state [ 100.151030][ T4511] loop4: detected capacity change from 0 to 128 [ 100.247186][ T4511] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 100.285757][ T4514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.304543][ T4511] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.349950][ T4519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.360703][ T4519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.372164][ T4519] device batadv_slave_0 entered promiscuous mode [ 100.549235][ T4511] EXT4-fs (loop4): unmounting filesystem. [ 101.159363][ T7] usb 4-1: USB disconnect, device number 6 [ 101.690344][ T4345] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 101.856083][ T4539] netlink: 'syz.0.58': attribute type 10 has an invalid length. [ 101.864182][ T4539] netlink: 40 bytes leftover after parsing attributes in process `syz.0.58'. [ 101.925454][ T4345] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 101.960481][ T4345] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 101.977503][ T4345] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 101.989893][ T4345] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.309829][ T4345] usb 5-1: usb_control_msg returned -32 [ 102.316062][ T4345] usbtmc 5-1:16.0: can't read capabilities [ 102.834120][ T4552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.844881][ T4552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.875950][ T4345] usb 5-1: USB disconnect, device number 3 [ 103.805031][ T4558] loop4: detected capacity change from 0 to 128 [ 103.859038][ T4558] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 103.920712][ T4558] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.960627][ T4306] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 104.625583][ T4566] device batadv_slave_0 entered promiscuous mode [ 104.873947][ T4558] EXT4-fs (loop4): unmounting filesystem. [ 105.014276][ T4306] usb 1-1: Using ep0 maxpacket: 8 [ 105.021792][ T4306] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 105.062937][ T4306] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 105.087309][ T4306] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 105.127369][ T4306] usb 1-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 105.146239][ T4306] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.177815][ T4306] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 105.197283][ T4306] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.214145][ T4333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.248634][ T4333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.266108][ T4574] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.266417][ T4306] usbtmc 1-1:16.0: bulk endpoints not found [ 105.282622][ T4571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.299605][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 105.538846][ T4579] loop3: detected capacity change from 0 to 1024 [ 105.587622][ T4579] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 105.614532][ T4579] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 105.706468][ T4584] netlink: 'syz.4.71': attribute type 10 has an invalid length. [ 105.715225][ T4584] netlink: 40 bytes leftover after parsing attributes in process `syz.4.71'. [ 105.728013][ T4584] device dummy0 entered promiscuous mode [ 105.737896][ T4584] bridge0: port 3(dummy0) entered blocking state [ 105.744854][ T4584] bridge0: port 3(dummy0) entered disabled state [ 105.781524][ T4584] bridge0: port 3(dummy0) entered blocking state [ 105.788097][ T4584] bridge0: port 3(dummy0) entered forwarding state [ 106.230160][ T4255] EXT4-fs (loop3): unmounting filesystem. [ 106.866311][ T7] usb 1-1: USB disconnect, device number 3 [ 107.230323][ T4345] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 107.432330][ T4345] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 107.447844][ T4345] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 107.483342][ T4345] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 107.543766][ T4345] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.719736][ T4601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.730562][ T4601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.812267][ T4345] usb 5-1: usb_control_msg returned -32 [ 107.819593][ T4345] usbtmc 5-1:16.0: can't read capabilities [ 108.620271][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 108.655188][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 108.688875][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 108.746427][ T4603] device bridge_slave_0 left promiscuous mode [ 108.773340][ T4603] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.835885][ T4603] device bridge_slave_1 left promiscuous mode [ 108.847347][ T4603] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.885251][ T4603] bond0: (slave bond_slave_0): Releasing backup interface [ 108.925238][ T4603] bond0: (slave bond_slave_1): Releasing backup interface [ 109.822863][ T4607] loop0: detected capacity change from 0 to 256 [ 109.925327][ T4603] team0: Port device team_slave_0 removed [ 110.098372][ T4341] usb 5-1: USB disconnect, device number 4 [ 110.147208][ T4603] team0: Port device team_slave_1 removed [ 110.761679][ T4603] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.790850][ T4603] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.810549][ T4603] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.938237][ T4610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.960492][ T4610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.192826][ T4618] device syzkaller0 entered promiscuous mode [ 111.565474][ T4302] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 111.765517][ T4302] usb 3-1: Using ep0 maxpacket: 8 [ 111.786757][ T4302] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 111.801149][ T4302] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 111.815426][ T4302] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 111.825849][ T4302] usb 3-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 111.841236][ T4302] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 111.858138][ T4302] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 111.883864][ T4302] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.945800][ T4302] usbtmc 3-1:16.0: bulk endpoints not found [ 112.482600][ T22] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 112.696972][ T22] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 112.722560][ T22] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.747739][ T22] usb 2-1: config 0 has no interfaces? [ 112.783388][ T22] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.816207][ T22] usb 2-1: config 0 has no interfaces? [ 112.855130][ T22] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.898826][ T22] usb 2-1: config 0 has no interfaces? [ 112.920085][ T22] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.938785][ T22] usb 2-1: config 0 has no interfaces? [ 112.963268][ T22] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.995637][ T22] usb 2-1: config 0 has no interfaces? [ 113.037037][ T22] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.067443][ T22] usb 2-1: config 0 has no interfaces? [ 113.123113][ T22] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.154301][ T22] usb 2-1: config 0 has no interfaces? [ 113.162196][ T22] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.173695][ T22] usb 2-1: config 0 has no interfaces? [ 113.182797][ T22] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 113.192004][ T22] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 113.209216][ T22] usb 2-1: Product: syz [ 113.228083][ T22] usb 2-1: Manufacturer: syz [ 113.234366][ T22] usb 2-1: SerialNumber: syz [ 113.255298][ T22] usb 2-1: config 0 descriptor?? [ 113.477866][ T7] usb 2-1: USB disconnect, device number 6 [ 114.192356][ T4642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.208065][ T4642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.406552][ T14] usb 3-1: USB disconnect, device number 2 [ 114.482109][ T4656] loop0: detected capacity change from 0 to 256 [ 114.558117][ T27] kauditd_printk_skb: 51 callbacks suppressed [ 114.558133][ T27] audit: type=1326 audit(1750753034.042:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4653 comm="syz.3.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68eb8e929 code=0x7ffc0000 [ 114.648446][ T4302] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 114.656487][ T7] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 114.723621][ T4664] loop3: detected capacity change from 0 to 1024 [ 114.730990][ T4664] EXT4-fs: Ignoring removed nomblk_io_submit option [ 114.737644][ T4664] EXT4-fs: Ignoring removed nomblk_io_submit option [ 115.068030][ T27] audit: type=1326 audit(1750753034.082:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4653 comm="syz.3.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68eb8e929 code=0x7ffc0000 [ 115.182943][ T4664] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 115.469512][ T4302] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 115.492229][ T7] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 115.502248][ T7] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 115.520459][ T4664] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 115.628442][ T4669] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 115.650346][ T7] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 115.659461][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.677602][ T27] audit: type=1326 audit(1750753034.082:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4653 comm="syz.3.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7fe68eb8e929 code=0x7ffc0000 [ 115.702608][ T4669] device bridge_slave_0 left promiscuous mode [ 115.756424][ T4669] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.840159][ T27] audit: type=1326 audit(1750753034.082:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4653 comm="syz.3.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68eb8e929 code=0x7ffc0000 [ 115.889570][ T7] usb 2-1: usb_control_msg returned -32 [ 115.897400][ T7] usbtmc 2-1:16.0: can't read capabilities [ 115.905055][ T4669] device bridge_slave_1 left promiscuous mode [ 115.951461][ T4669] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.995350][ T27] audit: type=1326 audit(1750753034.082:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4653 comm="syz.3.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68eb8e929 code=0x7ffc0000 [ 116.877902][ T27] audit: type=1326 audit(1750753034.082:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4653 comm="syz.3.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe68eb8d290 code=0x7ffc0000 [ 116.889836][ T4670] fido_id[4670]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 116.900005][ C0] vkms_vblank_simulate: vblank timer overrun [ 116.926995][ T4669] bond0: (slave bond_slave_0): Releasing backup interface [ 116.937878][ T4669] bond0: (slave bond_slave_1): Releasing backup interface [ 116.940185][ T7] usb 2-1: USB disconnect, device number 7 [ 116.945985][ T27] audit: type=1326 audit(1750753034.102:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4653 comm="syz.3.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68eb8e929 code=0x7ffc0000 [ 117.046532][ T4669] team0: Port device team_slave_0 removed [ 117.080064][ T27] audit: type=1326 audit(1750753034.102:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4653 comm="syz.3.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe68eb8e929 code=0x7ffc0000 [ 117.119437][ T27] audit: type=1326 audit(1750753034.102:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4653 comm="syz.3.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68eb8e929 code=0x7ffc0000 [ 117.120649][ T4669] team0: Port device team_slave_1 removed [ 117.154013][ T27] audit: type=1326 audit(1750753034.102:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4653 comm="syz.3.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fe68eb8e929 code=0x7ffc0000 [ 117.202031][ T4669] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.228621][ T4669] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.315771][ T4677] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.345074][ T4677] device batadv_slave_0 entered promiscuous mode [ 117.842612][ T4692] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.861423][ T4695] loop8: detected capacity change from 0 to 16384 [ 118.010387][ T7] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 118.213058][ T7] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 118.252335][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.281918][ T4696] loop8: detected capacity change from 16384 to 0 [ 118.347936][ T7] usb 2-1: config 0 has no interfaces? [ 118.453121][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.582979][ T7] usb 2-1: config 0 has no interfaces? [ 118.663335][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.792055][ T7] usb 2-1: config 0 has no interfaces? [ 118.937167][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.010047][ T7] usb 2-1: config 0 has no interfaces? [ 119.027436][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.073975][ T7] usb 2-1: config 0 has no interfaces? [ 119.104318][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.164432][ T7] usb 2-1: config 0 has no interfaces? [ 119.216622][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.267719][ T7] usb 2-1: config 0 has no interfaces? [ 119.289374][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.336564][ T7] usb 2-1: config 0 has no interfaces? [ 119.356825][ T7] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 119.390346][ T4345] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 119.396859][ T7] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 119.431142][ T7] usb 2-1: Product: syz [ 119.435381][ T7] usb 2-1: Manufacturer: syz [ 119.452511][ T4714] loop2: detected capacity change from 0 to 256 [ 119.471519][ T7] usb 2-1: SerialNumber: syz [ 119.494367][ T4711] device syzkaller0 entered promiscuous mode [ 119.515084][ T7] usb 2-1: config 0 descriptor?? [ 119.680343][ T4345] usb 4-1: Using ep0 maxpacket: 8 [ 119.687910][ T4345] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 119.696665][ T4345] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 119.706562][ T4345] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 119.716545][ T4345] usb 4-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 120.636874][ T4345] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 120.714543][ T4345] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 120.737868][ T4345] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.759995][ T4306] usb 2-1: USB disconnect, device number 8 [ 120.781761][ T4345] usbtmc 4-1:16.0: bulk endpoints not found [ 122.581843][ T4341] usb 4-1: USB disconnect, device number 7 [ 122.811921][ T7] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 123.022137][ T7] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 123.036794][ T7] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 123.050754][ T7] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 123.059858][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.282928][ T7] usb 5-1: usb_control_msg returned -32 [ 123.288950][ T7] usbtmc 5-1:16.0: can't read capabilities [ 123.877904][ T14] usb 5-1: USB disconnect, device number 5 [ 123.998065][ T4757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.605552][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 124.842160][ T4765] bridge0: port 3(dummy0) entered disabled state [ 124.908258][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 124.917136][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 124.926772][ T4765] device bridge_slave_0 left promiscuous mode [ 124.933833][ T4765] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.954666][ T4765] device bridge_slave_1 left promiscuous mode [ 124.968607][ T4765] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.992689][ T4765] bond0: (slave bond_slave_0): Releasing backup interface [ 125.019789][ T4765] bond0: (slave bond_slave_1): Releasing backup interface [ 125.099665][ T4765] team0: Port device team_slave_0 removed [ 125.151548][ T4765] team0: Port device team_slave_1 removed [ 125.158074][ T4765] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.176384][ T4765] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.184495][ T4765] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.380523][ T7] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 125.441377][ T4779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.451576][ T4774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.562681][ T4781] netlink: 'syz.0.123': attribute type 10 has an invalid length. [ 125.570683][ T4781] netlink: 40 bytes leftover after parsing attributes in process `syz.0.123'. [ 125.580319][ T4781] bridge0: port 1(dummy0) entered blocking state [ 125.587272][ T4781] bridge0: port 1(dummy0) entered disabled state [ 125.604639][ T4781] bridge0: port 1(dummy0) entered blocking state [ 125.611372][ T4781] bridge0: port 1(dummy0) entered forwarding state [ 126.041188][ T7] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 126.078231][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.128341][ T7] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.138957][ T7] usb 4-1: config 0 interface 0 has no altsetting 0 [ 126.151365][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.166965][ T7] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.176552][ T7] usb 4-1: config 0 interface 0 has no altsetting 0 [ 126.206124][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.225769][ T7] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.250921][ T7] usb 4-1: config 0 interface 0 has no altsetting 0 [ 126.259708][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.288711][ T7] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.296113][ T4786] loop4: detected capacity change from 0 to 256 [ 126.304074][ T7] usb 4-1: config 0 interface 0 has no altsetting 0 [ 126.306159][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.351375][ T7] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.360841][ T7] usb 4-1: config 0 interface 0 has no altsetting 0 [ 126.385384][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.421741][ T7] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.460159][ T7] usb 4-1: config 0 interface 0 has no altsetting 0 [ 126.491894][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.520259][ T7] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.587652][ T7] usb 4-1: config 0 interface 0 has no altsetting 0 [ 127.369994][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.382317][ T7] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 127.391359][ T7] usb 4-1: config 0 interface 0 has no altsetting 0 [ 127.400451][ T7] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 127.409543][ T7] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 127.429314][ T7] usb 4-1: Product: syz [ 127.433624][ T7] usb 4-1: Manufacturer: syz [ 127.458040][ T7] usb 4-1: SerialNumber: syz [ 127.499929][ T7] usb 4-1: config 0 descriptor?? [ 127.523761][ T7] yurex 4-1:0.0: Could not find endpoints [ 127.726042][ T7] usb 4-1: USB disconnect, device number 8 [ 127.770318][ T4341] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 127.969969][ T4341] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 127.990548][ T126] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 128.015459][ T4815] netlink: 'syz.4.136': attribute type 10 has an invalid length. [ 128.023903][ T4815] netlink: 40 bytes leftover after parsing attributes in process `syz.4.136'. [ 128.024645][ T4341] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 128.050490][ T4341] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 128.060735][ T4341] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.170663][ T126] usb 2-1: device descriptor read/64, error -71 [ 128.303436][ T4341] usb 3-1: usb_control_msg returned -32 [ 128.309845][ T4341] usbtmc 3-1:16.0: can't read capabilities [ 128.440302][ T126] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 128.610437][ T126] usb 2-1: device descriptor read/64, error -71 [ 128.730748][ T126] usb usb2-port1: attempt power cycle [ 128.828210][ T4820] loop4: detected capacity change from 0 to 1024 [ 128.864909][ T7] usb 3-1: USB disconnect, device number 3 [ 128.875959][ T4820] EXT4-fs: Ignoring removed orlov option [ 128.995381][ T4820] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 129.241943][ T126] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 129.293140][ T126] usb 2-1: device descriptor read/8, error -71 [ 129.862262][ T4266] EXT4-fs (loop4): unmounting filesystem. [ 129.930474][ T126] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 129.981085][ T126] usb 2-1: device descriptor read/8, error -71 [ 130.111728][ T126] usb usb2-port1: unable to enumerate USB device [ 130.266565][ T4834] loop2: detected capacity change from 0 to 256 [ 130.336640][ T4838] loop4: detected capacity change from 0 to 1024 [ 130.397001][ T4837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.288661][ T4838] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 131.316343][ T4838] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 131.531625][ T4266] EXT4-fs (loop4): unmounting filesystem. [ 132.202016][ T126] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 132.760409][ T951] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 132.769784][ T126] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 132.779953][ T126] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.793438][ T126] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 132.803429][ T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.882881][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.889621][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.989884][ T27] kauditd_printk_skb: 20 callbacks suppressed [ 132.989896][ T27] audit: type=1326 audit(1750753052.472:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4861 comm="syz.1.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1c58e929 code=0x7ffc0000 [ 133.019353][ T951] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 133.024747][ T126] usb 3-1: usb_control_msg returned -32 [ 133.037441][ T951] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.055232][ T126] usbtmc 3-1:16.0: can't read capabilities [ 133.088488][ T951] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 133.104717][ T951] usb 5-1: config 0 interface 0 has no altsetting 0 [ 133.112865][ T951] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.128959][ T951] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 133.148482][ T951] usb 5-1: config 0 interface 0 has no altsetting 0 [ 133.171865][ T27] audit: type=1326 audit(1750753052.512:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4861 comm="syz.1.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1c58e929 code=0x7ffc0000 [ 133.173506][ T951] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.238525][ T951] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 133.256185][ T951] usb 5-1: config 0 interface 0 has no altsetting 0 [ 133.266201][ T951] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.271821][ T27] audit: type=1326 audit(1750753052.532:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4861 comm="syz.1.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f3c1c58e929 code=0x7ffc0000 [ 133.285383][ T951] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 133.314506][ T951] usb 5-1: config 0 interface 0 has no altsetting 0 [ 133.315372][ T27] audit: type=1326 audit(1750753052.532:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4861 comm="syz.1.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1c58e929 code=0x7ffc0000 [ 133.323284][ T951] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.354464][ T27] audit: type=1326 audit(1750753052.532:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4861 comm="syz.1.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1c58e929 code=0x7ffc0000 [ 133.365608][ T951] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 133.392140][ T27] audit: type=1326 audit(1750753052.532:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4861 comm="syz.1.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3c1c58e929 code=0x7ffc0000 [ 133.403095][ T951] usb 5-1: config 0 interface 0 has no altsetting 0 [ 133.415582][ T27] audit: type=1326 audit(1750753052.532:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4861 comm="syz.1.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1c58e929 code=0x7ffc0000 [ 133.444876][ T27] audit: type=1326 audit(1750753052.532:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4861 comm="syz.1.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1c58e929 code=0x7ffc0000 [ 133.452797][ T951] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.468395][ T27] audit: type=1326 audit(1750753052.552:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4861 comm="syz.1.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f3c1c58e929 code=0x7ffc0000 [ 133.489214][ T951] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 133.501575][ T27] audit: type=1326 audit(1750753052.552:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4861 comm="syz.1.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1c58e929 code=0x7ffc0000 [ 133.515931][ T951] usb 5-1: config 0 interface 0 has no altsetting 0 [ 133.539395][ T951] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.551027][ T951] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 133.560103][ T951] usb 5-1: config 0 interface 0 has no altsetting 0 [ 133.572159][ T951] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.586691][ T951] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 133.593933][ T126] usb 3-1: USB disconnect, device number 4 [ 133.599143][ T951] usb 5-1: config 0 interface 0 has no altsetting 0 [ 133.613605][ T951] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 133.626200][ T951] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 133.636098][ T951] usb 5-1: Product: syz [ 133.644537][ T951] usb 5-1: Manufacturer: syz [ 133.649186][ T951] usb 5-1: SerialNumber: syz [ 133.656465][ T951] usb 5-1: config 0 descriptor?? [ 133.666820][ T951] yurex 5-1:0.0: Could not find endpoints [ 133.720410][ T7] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 133.908952][ T126] usb 5-1: USB disconnect, device number 6 [ 134.000884][ T7] usb 1-1: device descriptor read/64, error -71 [ 134.270527][ T7] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 134.470517][ T7] usb 1-1: device descriptor read/64, error -71 [ 134.607442][ T7] usb usb1-port1: attempt power cycle [ 134.895328][ T4882] loop3: detected capacity change from 0 to 1024 [ 135.019505][ T4882] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 135.048990][ T4882] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 135.120352][ T7] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 135.192028][ T4890] nbd: socks must be embedded in a SOCK_ITEM attr [ 135.201108][ T4890] block nbd0: shutting down sockets [ 135.921305][ T7] usb 1-1: device descriptor read/8, error -71 [ 136.190324][ T7] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 136.511201][ T4255] EXT4-fs (loop3): unmounting filesystem. [ 136.859132][ T7] usb 1-1: device descriptor read/8, error -71 [ 136.971731][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 136.982747][ T7] usb usb1-port1: unable to enumerate USB device [ 136.991930][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 137.007924][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 137.446538][ T126] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 137.467371][ T126] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 137.480763][ T4345] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 137.522469][ T4912] loop2: detected capacity change from 0 to 1024 [ 137.578588][ T4912] EXT4-fs: Ignoring removed nomblk_io_submit option [ 137.611538][ T4912] EXT4-fs: Ignoring removed nomblk_io_submit option [ 137.630134][ T4912] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 137.651528][ T7] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 137.682618][ T4912] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 137.694198][ T4345] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 137.716756][ T4345] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 137.799219][ T4345] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 137.830410][ T4345] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.842123][ T7] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 137.858582][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.899115][ T7] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 137.947515][ T7] usb 4-1: config 0 interface 0 has no altsetting 0 [ 138.049058][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.074510][ T7] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 138.085803][ T7] usb 4-1: config 0 interface 0 has no altsetting 0 [ 138.088655][ T4345] usb 2-1: usb_control_msg returned -32 [ 138.107228][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.117634][ T4345] usbtmc 2-1:16.0: can't read capabilities [ 138.119350][ T7] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 138.143382][ T7] usb 4-1: config 0 interface 0 has no altsetting 0 [ 138.164951][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.197606][ T27] kauditd_printk_skb: 161 callbacks suppressed [ 138.197618][ T27] audit: type=1326 audit(1750753057.682:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4909 comm="syz.2.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93e58e929 code=0x7ffc0000 [ 138.281509][ T7] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 138.335878][ T7] usb 4-1: config 0 interface 0 has no altsetting 0 [ 138.402554][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.411064][ T27] audit: type=1326 audit(1750753057.682:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4909 comm="syz.2.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93e58e929 code=0x7ffc0000 [ 138.431600][ T7] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 138.475836][ T7] usb 4-1: config 0 interface 0 has no altsetting 0 [ 138.495365][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.530851][ T7] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 138.570054][ T7] usb 4-1: config 0 interface 0 has no altsetting 0 [ 138.611627][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.634081][ T7] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 138.658722][ T4345] usb 2-1: USB disconnect, device number 13 [ 138.698098][ T7] usb 4-1: config 0 interface 0 has no altsetting 0 [ 138.731560][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.909751][ T7] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 138.934631][ T7] usb 4-1: config 0 interface 0 has no altsetting 0 [ 139.003476][ T7] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 139.084143][ T4935] input: syz1 as /devices/virtual/input/input8 [ 139.090846][ T7] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 139.151088][ T7] usb 4-1: Product: syz [ 139.155672][ T7] usb 4-1: Manufacturer: syz [ 139.240550][ T7] usb 4-1: SerialNumber: syz [ 139.348930][ T7] usb 4-1: config 0 descriptor?? [ 139.357382][ T7] yurex 4-1:0.0: Could not find endpoints [ 139.551975][ T4943] netlink: 'syz.1.176': attribute type 10 has an invalid length. [ 139.575759][ T4302] usb 4-1: USB disconnect, device number 9 [ 139.581968][ T7] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 139.738520][ T4943] team0: Port device dummy0 added [ 139.760504][ T7] usb 1-1: device descriptor read/64, error -71 [ 139.775554][ T4944] netlink: 'syz.1.176': attribute type 10 has an invalid length. [ 139.931256][ T4944] team0: Port device dummy0 removed [ 140.050531][ T7] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 140.065614][ T4944] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 140.210665][ T7] usb 1-1: device descriptor read/64, error -71 [ 140.340998][ T7] usb usb1-port1: attempt power cycle [ 140.489985][ T27] audit: type=1326 audit(1750753059.972:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4959 comm="syz.3.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68eb8e929 code=0x7ffc0000 [ 140.576006][ T27] audit: type=1326 audit(1750753059.972:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4959 comm="syz.3.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68eb8e929 code=0x7ffc0000 [ 140.708758][ T27] audit: type=1326 audit(1750753059.982:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4959 comm="syz.3.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fe68eb8e929 code=0x7ffc0000 [ 140.760513][ T7] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 140.813267][ T7] usb 1-1: device descriptor read/8, error -71 [ 140.838836][ T4966] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 140.849575][ T27] audit: type=1326 audit(1750753059.982:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4959 comm="syz.3.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68eb8e929 code=0x7ffc0000 [ 140.916343][ T4966] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 140.941851][ T4966] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 140.968812][ T27] audit: type=1326 audit(1750753059.982:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4959 comm="syz.3.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fe68eb8e929 code=0x7ffc0000 [ 141.059659][ T27] audit: type=1326 audit(1750753059.982:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4959 comm="syz.3.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68eb8e929 code=0x7ffc0000 [ 141.092195][ T7] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 141.132632][ T27] audit: type=1326 audit(1750753060.002:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4959 comm="syz.3.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68eb8e929 code=0x7ffc0000 [ 141.160899][ T7] usb 1-1: device descriptor read/8, error -71 [ 141.310567][ T7] usb usb1-port1: unable to enumerate USB device [ 141.610390][ T4345] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 141.811822][ T4345] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 141.833265][ T4345] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 141.850418][ T22] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 141.899172][ T4345] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 141.929134][ T4345] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.065697][ T22] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 142.115514][ T22] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.168713][ T4345] usb 4-1: usb_control_msg returned -32 [ 142.176097][ T4345] usbtmc 4-1:16.0: can't read capabilities [ 142.202653][ T22] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 142.246170][ T22] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 142.289856][ T22] usb 5-1: config 0 interface 0 has no altsetting 0 [ 142.305492][ T5005] loop2: detected capacity change from 0 to 2048 [ 142.311979][ T22] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.365334][ T22] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 142.390514][ T22] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 142.391092][ T5005] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 142.415168][ T22] usb 5-1: config 0 interface 0 has no altsetting 0 [ 142.424079][ T22] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.434711][ T22] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 142.443960][ T22] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 142.460577][ T22] usb 5-1: config 0 interface 0 has no altsetting 0 [ 142.469911][ T22] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.482347][ T22] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 142.491634][ T22] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 142.508300][ T22] usb 5-1: config 0 interface 0 has no altsetting 0 [ 142.519608][ T22] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.534082][ T22] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 142.543845][ T22] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 142.557335][ T22] usb 5-1: config 0 interface 0 has no altsetting 0 [ 142.565807][ T22] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.579341][ T22] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 142.589145][ T22] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 142.609760][ T22] usb 5-1: config 0 interface 0 has no altsetting 0 [ 142.618175][ T22] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.629551][ T22] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 142.646208][ T22] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 142.667621][ T5005] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 142.689394][ T22] usb 5-1: config 0 interface 0 has no altsetting 0 [ 142.704730][ T22] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.717492][ T5005] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28 [ 142.731438][ T22] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 142.742022][ T22] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 142.761442][ T5005] EXT4-fs (loop2): This should not happen!! Data will be lost [ 142.761442][ T5005] [ 142.771550][ T22] usb 5-1: config 0 interface 0 has no altsetting 0 [ 142.780004][ T4345] usb 4-1: USB disconnect, device number 10 [ 142.904948][ T22] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 142.915577][ T22] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 142.926231][ T22] usb 5-1: Product: syz [ 142.936295][ T5005] EXT4-fs (loop2): Total free blocks count 0 [ 142.955597][ T5005] EXT4-fs (loop2): Free/Dirty block details [ 142.961855][ T22] usb 5-1: Manufacturer: syz [ 142.966487][ T22] usb 5-1: SerialNumber: syz [ 142.971479][ T5005] EXT4-fs (loop2): free_blocks=2415919104 [ 142.977941][ T5005] EXT4-fs (loop2): dirty_blocks=32 [ 142.984563][ T22] usb 5-1: config 0 descriptor?? [ 142.989782][ T5005] EXT4-fs (loop2): Block reservation details [ 142.992344][ T22] yurex 5-1:0.0: Could not find endpoints [ 143.004866][ T5005] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 143.093740][ T5017] input: syz1 as /devices/virtual/input/input10 [ 143.217799][ T14] usb 5-1: USB disconnect, device number 7 [ 143.288743][ T4379] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 143.652385][ T5019] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 143.688186][ T5019] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 143.695844][ T5019] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 144.835414][ T5027] loop3: detected capacity change from 0 to 128 [ 145.268272][ T5033] loop4: detected capacity change from 0 to 128 [ 145.423525][ T5033] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 145.523478][ T27] audit: type=1326 audit(1750753065.012:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5041 comm="syz.3.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68eb8e929 code=0x7ffc0000 [ 145.546688][ T27] audit: type=1326 audit(1750753065.022:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5041 comm="syz.3.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7fe68eb8e929 code=0x7ffc0000 [ 145.570078][ T5033] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.610329][ T126] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 145.626131][ T27] audit: type=1326 audit(1750753065.022:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5041 comm="syz.3.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68eb8e929 code=0x7ffc0000 [ 145.664845][ T27] audit: type=1326 audit(1750753065.022:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5041 comm="syz.3.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe68eb8d290 code=0x7ffc0000 [ 145.705013][ T7] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 145.724970][ T4266] EXT4-fs (loop4): unmounting filesystem. [ 145.748112][ T7] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 145.775174][ T5042] loop3: detected capacity change from 0 to 1024 [ 145.813779][ T27] audit: type=1326 audit(1750753065.022:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5041 comm="syz.3.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68eb8e929 code=0x7ffc0000 [ 145.842194][ T5042] EXT4-fs: Ignoring removed nomblk_io_submit option [ 145.877800][ T5042] EXT4-fs: Ignoring removed nomblk_io_submit option [ 145.880435][ T126] usb 2-1: device descriptor read/64, error -71 [ 145.915429][ T5042] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 145.945209][ T27] audit: type=1326 audit(1750753065.022:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5041 comm="syz.3.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe68eb8e929 code=0x7ffc0000 [ 146.000508][ T5042] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 146.155892][ T27] audit: type=1326 audit(1750753065.022:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5041 comm="syz.3.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68eb8e929 code=0x7ffc0000 [ 146.240548][ T126] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 146.330298][ T27] audit: type=1326 audit(1750753065.022:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5041 comm="syz.3.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fe68eb8e929 code=0x7ffc0000 [ 146.417353][ T5046] fido_id[5046]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 146.431284][ T4306] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 146.438811][ T126] usb 2-1: device descriptor read/64, error -71 [ 146.478320][ T27] audit: type=1326 audit(1750753065.022:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5041 comm="syz.3.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68eb8e929 code=0x7ffc0000 [ 146.570713][ T27] audit: type=1326 audit(1750753065.022:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5041 comm="syz.3.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe68eb8e929 code=0x7ffc0000 [ 146.576892][ T126] usb usb2-port1: attempt power cycle [ 146.638058][ T4306] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 146.671473][ T4306] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 146.687890][ T4306] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 146.698432][ T4306] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.781380][ T5060] loop2: detected capacity change from 0 to 256 [ 146.813704][ T5060] FAT-fs (loop2): Unrecognized mount option "ÿÿÿÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffff" or missing value [ 146.930356][ T4302] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 146.952540][ T4306] usb 5-1: usb_control_msg returned -32 [ 146.960183][ T4306] usbtmc 5-1:16.0: can't read capabilities [ 147.060454][ T126] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 147.123075][ T126] usb 2-1: device descriptor read/8, error -71 [ 147.480606][ T126] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 147.531984][ T126] usb 2-1: device descriptor read/8, error -71 [ 147.701337][ T126] usb usb2-port1: unable to enumerate USB device [ 147.895865][ T4302] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 147.908731][ T4302] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.927495][ T4302] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 147.943474][ T4302] usb 1-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 147.958679][ T4302] usb 1-1: config 0 interface 0 has no altsetting 0 [ 147.978995][ T4302] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.991002][ T4302] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 148.001492][ T4302] usb 1-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 148.014981][ T4302] usb 1-1: config 0 interface 0 has no altsetting 0 [ 148.023443][ T4302] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.055190][ T4302] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 148.083291][ T4302] usb 1-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 148.137329][ T4302] usb 1-1: config 0 interface 0 has no altsetting 0 [ 148.162441][ T4302] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.196236][ T4302] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 148.221359][ T4302] usb 1-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 148.274966][ T4302] usb 1-1: config 0 interface 0 has no altsetting 0 [ 148.306081][ T4302] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.329915][ T4302] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 148.364163][ T4302] usb 1-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 148.406393][ T4302] usb 1-1: config 0 interface 0 has no altsetting 0 [ 148.427792][ T5085] loop2: detected capacity change from 0 to 1024 [ 148.448964][ T4302] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.465616][ T4302] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 148.475327][ T4302] usb 1-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 148.502477][ T4302] usb 1-1: config 0 interface 0 has no altsetting 0 [ 148.549239][ T5085] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 148.562578][ T4302] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.667410][ T4302] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 148.737940][ T4302] usb 1-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 148.792130][ T4302] usb 1-1: config 0 interface 0 has no altsetting 0 [ 148.818367][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 148.824554][ T4302] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.864778][ T4302] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 149.033560][ T4302] usb 1-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 149.074831][ T4302] usb 1-1: config 0 interface 0 has no altsetting 0 [ 149.144172][ T4302] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 149.253917][ T5101] input: syz1 as /devices/virtual/input/input12 [ 149.284226][ T4302] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 149.420803][ T4302] usb 1-1: Product: syz [ 149.471593][ T4302] usb 1-1: Manufacturer: syz [ 149.493825][ T5103] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 149.502716][ T4302] usb 1-1: SerialNumber: syz [ 149.553491][ T4302] usb 1-1: config 0 descriptor?? [ 149.611738][ T7] usb 5-1: USB disconnect, device number 8 [ 149.738068][ T5107] netlink: 'syz.4.222': attribute type 10 has an invalid length. [ 149.746277][ T5107] netlink: 40 bytes leftover after parsing attributes in process `syz.4.222'. [ 150.303522][ T4302] usb 1-1: can't set config #0, error -71 [ 150.321281][ T4302] usb 1-1: USB disconnect, device number 12 [ 150.474520][ T5113] lo speed is unknown, defaulting to 1000 [ 150.516855][ T5113] lo speed is unknown, defaulting to 1000 [ 150.551734][ T5113] lo speed is unknown, defaulting to 1000 [ 150.604984][ T5113] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 150.629841][ T5113] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 150.739217][ T5113] lo speed is unknown, defaulting to 1000 [ 150.755783][ T5123] loop3: detected capacity change from 0 to 1024 [ 150.763339][ T5113] lo speed is unknown, defaulting to 1000 [ 150.780973][ T5123] ext4: Unknown parameter 'uid<00000000000000000000' [ 150.795487][ T5113] lo speed is unknown, defaulting to 1000 [ 150.823132][ T5113] lo speed is unknown, defaulting to 1000 [ 150.854738][ T5113] lo speed is unknown, defaulting to 1000 [ 151.242837][ T5132] loop2: detected capacity change from 0 to 1024 [ 151.276250][ T5132] EXT4-fs: Ignoring removed bh option [ 151.371468][ T5132] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 151.380800][ T4302] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 151.438303][ T5137] loop4: detected capacity change from 0 to 1024 [ 151.482574][ T5137] EXT4-fs: Ignoring removed orlov option [ 151.540413][ T4302] usb 4-1: device descriptor read/64, error -71 [ 151.563070][ T5137] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 151.810316][ T4302] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 152.445198][ T4266] EXT4-fs (loop4): unmounting filesystem. [ 152.580409][ T4302] usb 4-1: device descriptor read/64, error -71 [ 152.721302][ T4302] usb usb4-port1: attempt power cycle [ 153.130308][ T4302] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 153.323063][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 153.362014][ T4306] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 153.369969][ T4302] usb 4-1: device descriptor read/8, error -71 [ 153.676840][ T5156] Zero length message leads to an empty skb [ 153.690596][ T5155] nbd: socks must be embedded in a SOCK_ITEM attr [ 153.698047][ T5155] block nbd0: shutting down sockets [ 153.711442][ T4302] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 153.723499][ T4306] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 154.331588][ T4306] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 154.395208][ T4306] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 154.404528][ T4306] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.417796][ T4302] usb 4-1: device descriptor read/8, error -71 [ 154.573002][ T4302] usb usb4-port1: unable to enumerate USB device [ 154.638702][ T4306] usb 5-1: usb_control_msg returned -32 [ 154.646144][ T4306] usbtmc 5-1:16.0: can't read capabilities [ 154.990295][ T4302] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 155.181745][ T4302] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 155.203036][ T4306] usb 5-1: USB disconnect, device number 9 [ 155.221807][ T4302] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.266911][ T4302] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 155.302215][ T4302] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 155.329993][ T4302] usb 4-1: config 0 interface 0 has no altsetting 0 [ 155.350649][ T5174] netlink: 16 bytes leftover after parsing attributes in process `syz.1.242'. [ 155.371484][ T4302] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.390352][ T4302] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 155.426046][ T4302] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 155.490459][ T4302] usb 4-1: config 0 interface 0 has no altsetting 0 [ 155.507222][ T4302] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.530340][ T4302] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 155.539353][ T4302] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 155.557707][ T4302] usb 4-1: config 0 interface 0 has no altsetting 0 [ 155.579505][ T4302] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.599035][ T4302] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 155.609907][ T4302] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 155.626998][ T4302] usb 4-1: config 0 interface 0 has no altsetting 0 [ 155.641381][ T4302] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.660312][ T4302] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 155.679483][ T4302] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 155.700369][ T4302] usb 4-1: config 0 interface 0 has no altsetting 0 [ 155.720685][ T4302] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.740409][ T4302] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 155.790418][ T4302] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 155.851130][ T4302] usb 4-1: config 0 interface 0 has no altsetting 0 [ 155.932124][ T4302] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.951544][ T4302] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 155.962488][ T5184] loop4: detected capacity change from 0 to 1024 [ 155.969722][ T4302] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 155.984014][ T4302] usb 4-1: config 0 interface 0 has no altsetting 0 [ 155.993477][ T5184] EXT4-fs: Ignoring removed orlov option [ 156.034960][ T4302] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.046994][ T4302] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 156.057679][ T4302] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 156.071828][ T4302] usb 4-1: config 0 interface 0 has no altsetting 0 [ 156.083589][ T4302] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 156.091626][ T5184] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 156.092906][ T4302] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 156.110783][ T4302] usb 4-1: Product: syz [ 156.115971][ T4302] usb 4-1: Manufacturer: syz [ 156.121419][ T4302] usb 4-1: SerialNumber: syz [ 156.129073][ T4302] usb 4-1: config 0 descriptor?? [ 156.139206][ T4302] yurex 4-1:0.0: Could not find endpoints [ 156.316496][ T4306] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 156.348480][ T4302] usb 4-1: USB disconnect, device number 15 [ 156.470464][ T4306] usb 1-1: device descriptor read/64, error -71 [ 156.825899][ T4306] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 157.000405][ T4306] usb 1-1: device descriptor read/64, error -71 [ 157.098188][ T4266] EXT4-fs (loop4): unmounting filesystem. [ 157.130643][ T4306] usb usb1-port1: attempt power cycle [ 157.294994][ T5197] loop3: detected capacity change from 0 to 1024 [ 157.302435][ T5197] ext4: Unknown parameter 'uid<00000000000000000000' [ 157.350350][ T4299] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 157.545526][ T4299] usb 3-1: Using ep0 maxpacket: 8 [ 157.557572][ T27] kauditd_printk_skb: 33 callbacks suppressed [ 157.557588][ T27] audit: type=1326 audit(1750753077.042:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5205 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68eb8e929 code=0x7ffc0000 [ 157.570434][ T4306] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 157.592611][ T4299] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 157.604050][ T4345] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 157.616174][ T4345] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 157.661165][ T4306] usb 1-1: device descriptor read/8, error -71 [ 157.689716][ T4299] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 157.723150][ T5206] loop3: detected capacity change from 0 to 1024 [ 157.741992][ T5206] EXT4-fs: Ignoring removed nomblk_io_submit option [ 157.766972][ T4299] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 157.769133][ T27] audit: type=1326 audit(1750753077.042:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5205 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7fe68eb8e929 code=0x7ffc0000 [ 157.803131][ T5206] EXT4-fs: Ignoring removed nomblk_io_submit option [ 157.823655][ T5206] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 157.838753][ T4299] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 157.851661][ T5206] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 157.863760][ T27] audit: type=1326 audit(1750753077.042:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5205 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68eb8e929 code=0x7ffc0000 [ 157.903584][ T4299] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 157.950399][ T4306] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 157.970174][ T4299] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 157.998628][ T27] audit: type=1326 audit(1750753077.042:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5205 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe68eb8d290 code=0x7ffc0000 [ 158.006052][ T4299] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.022191][ T4306] usb 1-1: device descriptor read/8, error -71 [ 158.055513][ T5209] fido_id[5209]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 158.094239][ T27] audit: type=1326 audit(1750753077.042:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5205 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68eb8e929 code=0x7ffc0000 [ 158.148108][ T27] audit: type=1326 audit(1750753077.042:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5205 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe68eb8e929 code=0x7ffc0000 [ 158.172111][ T4306] usb usb1-port1: unable to enumerate USB device [ 158.212574][ T27] audit: type=1326 audit(1750753077.042:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5205 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68eb8e929 code=0x7ffc0000 [ 158.246799][ T27] audit: type=1326 audit(1750753077.042:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5205 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fe68eb8e929 code=0x7ffc0000 [ 158.272663][ T27] audit: type=1326 audit(1750753077.042:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5205 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68eb8e929 code=0x7ffc0000 [ 158.295967][ T27] audit: type=1326 audit(1750753077.042:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5205 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe68eb8e929 code=0x7ffc0000 [ 158.343693][ T4299] usb 3-1: usb_control_msg returned -32 [ 158.349358][ T4299] usbtmc 3-1:16.0: can't read capabilities [ 158.840448][ T22] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 159.052105][ T22] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 159.063432][ T5234] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 159.072347][ T22] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 159.169805][ T22] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 159.208991][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.473161][ T22] usb 5-1: usb_control_msg returned -32 [ 159.478807][ T22] usbtmc 5-1:16.0: can't read capabilities [ 160.607127][ T126] usb 3-1: USB disconnect, device number 5 [ 160.970309][ T4306] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 161.819022][ T4299] usb 5-1: USB disconnect, device number 10 [ 161.871035][ T4306] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 161.886180][ T4306] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 161.905491][ T4306] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 161.935858][ T4306] usb 1-1: config 0 interface 0 has no altsetting 0 [ 161.974256][ T4306] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 162.010369][ T4306] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 162.065963][ T4306] usb 1-1: config 0 interface 0 has no altsetting 0 [ 162.101263][ T4306] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 162.130370][ T4306] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 162.150420][ T4306] usb 1-1: config 0 interface 0 has no altsetting 0 [ 162.168425][ T5266] netlink: 'syz.3.267': attribute type 10 has an invalid length. [ 162.176355][ T5266] netlink: 40 bytes leftover after parsing attributes in process `syz.3.267'. [ 162.185332][ T5266] device dummy0 entered promiscuous mode [ 162.191654][ T5266] bridge0: port 1(dummy0) entered blocking state [ 162.198052][ T5266] bridge0: port 1(dummy0) entered disabled state [ 162.205729][ T5266] bridge0: port 1(dummy0) entered blocking state [ 162.212421][ T5266] bridge0: port 1(dummy0) entered forwarding state [ 162.227091][ T4306] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 162.236670][ T4306] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 162.249963][ T4306] usb 1-1: config 0 interface 0 has no altsetting 0 [ 162.258633][ T4306] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 162.268611][ T4306] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 162.271682][ T5264] loop4: detected capacity change from 0 to 1024 [ 162.279085][ T4306] usb 1-1: config 0 interface 0 has no altsetting 0 [ 162.318360][ T4306] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 162.341189][ T5264] ext4: Unknown parameter 'uid<00000000000000000000' [ 162.391975][ T4306] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 162.453885][ T4306] usb 1-1: config 0 interface 0 has no altsetting 0 [ 162.497750][ T4306] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 162.553631][ T4306] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 162.581900][ T5272] 9pnet_fd: p9_fd_create_unix (5272): problem connecting socket: éq‰Y’3aK: -111 [ 162.592867][ T4306] usb 1-1: config 0 interface 0 has no altsetting 0 [ 162.612127][ T4306] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 162.655878][ T5274] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 162.666907][ T4306] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 162.686835][ T4306] usb 1-1: config 0 interface 0 has no altsetting 0 [ 162.719461][ T4306] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 162.749347][ T4306] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 162.778196][ T4306] usb 1-1: Product: syz [ 162.823595][ T4306] usb 1-1: Manufacturer: syz [ 162.828315][ T4306] usb 1-1: SerialNumber: syz [ 162.873344][ T4306] usb 1-1: config 0 descriptor?? [ 162.894618][ T4306] yurex 1-1:0.0: Could not find endpoints [ 163.132574][ T951] usb 1-1: USB disconnect, device number 17 [ 163.231456][ T5287] xt_recent: hitcount (692) is larger than allowed maximum (255) [ 164.280472][ T5294] xt_CT: You must specify a L4 protocol and not use inversions on it [ 165.010973][ T5298] lo speed is unknown, defaulting to 1000 [ 165.060522][ T4306] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 165.069988][ T5304] cgroup: Unknown subsys name 'euid>00000000000000000000' [ 165.074184][ T27] kauditd_printk_skb: 80 callbacks suppressed [ 165.074203][ T27] audit: type=1326 audit(1750753084.562:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5299 comm="syz.1.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1c58e929 code=0x7ffc0000 [ 165.117052][ T22] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 165.133391][ T22] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 165.170361][ T27] audit: type=1326 audit(1750753084.592:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5299 comm="syz.1.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f3c1c58e929 code=0x7ffc0000 [ 165.255953][ T4306] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 165.277080][ T4306] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 165.298748][ T27] audit: type=1326 audit(1750753084.592:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5299 comm="syz.1.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1c58e929 code=0x7ffc0000 [ 165.354153][ T4306] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 165.370338][ T4306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.378587][ T27] audit: type=1326 audit(1750753084.592:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5299 comm="syz.1.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3c1c58d290 code=0x7ffc0000 [ 165.448271][ T5306] fido_id[5306]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 165.470291][ T27] audit: type=1326 audit(1750753084.592:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5299 comm="syz.1.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1c58e929 code=0x7ffc0000 [ 165.557835][ T27] audit: type=1326 audit(1750753084.592:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5299 comm="syz.1.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3c1c58e929 code=0x7ffc0000 [ 165.625378][ T4306] usb 4-1: usb_control_msg returned -32 [ 165.635991][ T4306] usbtmc 4-1:16.0: can't read capabilities [ 165.680310][ T27] audit: type=1326 audit(1750753084.602:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5299 comm="syz.1.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1c58e929 code=0x7ffc0000 [ 165.721047][ T5312] netlink: '+}[@': attribute type 2 has an invalid length. [ 165.754538][ T27] audit: type=1326 audit(1750753084.602:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5299 comm="syz.1.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f3c1c58e929 code=0x7ffc0000 [ 165.817618][ T27] audit: type=1326 audit(1750753084.602:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5299 comm="syz.1.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1c58e929 code=0x7ffc0000 [ 165.843982][ T5316] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 165.851072][ T5316] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 165.884282][ T5316] vhci_hcd vhci_hcd.0: Device attached [ 165.910680][ T27] audit: type=1326 audit(1750753084.602:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5299 comm="syz.1.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c1c58e929 code=0x7ffc0000 [ 165.943423][ T5317] vhci_hcd: connection closed [ 165.946804][ T4333] vhci_hcd: stop threads [ 165.964679][ T5320] 9pnet_fd: p9_fd_create_unix (5320): problem connecting socket: éq‰Y’3aK: -111 [ 165.985783][ T4333] vhci_hcd: release socket [ 165.996293][ T4333] vhci_hcd: disconnect device [ 166.188028][ T4299] usb 4-1: USB disconnect, device number 16 [ 166.320430][ T22] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 166.337379][ T5328] loop2: detected capacity change from 0 to 764 [ 166.378661][ T5328] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 166.480533][ T22] usb 1-1: device descriptor read/64, error -71 [ 166.881076][ T22] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 167.050325][ T22] usb 1-1: device descriptor read/64, error -71 [ 167.181937][ T22] usb usb1-port1: attempt power cycle [ 167.638507][ T4306] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 167.670496][ T22] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 167.684692][ T4306] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 167.740602][ T5349] loop3: detected capacity change from 0 to 1024 [ 167.751133][ T22] usb 1-1: device descriptor read/8, error -71 [ 167.803347][ T5349] EXT4-fs: Ignoring removed nomblk_io_submit option [ 167.850373][ T5349] EXT4-fs: Ignoring removed nomblk_io_submit option [ 167.859002][ T5356] netem: change failed [ 167.890731][ T5349] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 168.002075][ T5349] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 168.200450][ T22] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 168.259990][ T5364] loop2: detected capacity change from 0 to 128 [ 168.279206][ T22] usb 1-1: device descriptor read/8, error -71 [ 168.443841][ T22] usb usb1-port1: unable to enumerate USB device [ 168.476314][ T5362] 9pnet_fd: p9_fd_create_unix (5362): problem connecting socket: éq‰Y’3aK: -111 [ 168.570557][ T5364] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 168.582844][ T5364] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.827231][ T5364] lo speed is unknown, defaulting to 1000 [ 169.015262][ T951] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 169.220308][ T951] usb 5-1: device descriptor read/64, error -71 [ 169.294824][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 169.433107][ T5377] syz.1.297 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 169.490536][ T951] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 169.650402][ T951] usb 5-1: device descriptor read/64, error -71 [ 169.796318][ T951] usb usb5-port1: attempt power cycle [ 169.813487][ T4299] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 170.003686][ T4299] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 170.027803][ T4299] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 170.066959][ T4299] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 170.079702][ T4299] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.210387][ T951] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 170.250970][ T951] usb 5-1: device descriptor read/8, error -71 [ 170.443342][ T4299] usb 1-1: usb_control_msg returned -32 [ 170.449917][ T4299] usbtmc 1-1:16.0: can't read capabilities [ 170.580435][ T951] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 170.630825][ T951] usb 5-1: device descriptor read/8, error -71 [ 170.694094][ T5414] input: syz1 as /devices/virtual/input/input14 [ 170.750433][ T951] usb usb5-port1: unable to enumerate USB device [ 171.004878][ T4306] usb 1-1: USB disconnect, device number 22 [ 171.497327][ T5425] 9pnet_fd: p9_fd_create_unix (5425): problem connecting socket: éq‰Y’3aK: -111 [ 172.131128][ T5432] loop3: detected capacity change from 0 to 2048 [ 172.271837][ T5432] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 172.345981][ T5432] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 172.390418][ T5432] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28 [ 172.490385][ T5432] EXT4-fs (loop3): This should not happen!! Data will be lost [ 172.490385][ T5432] [ 172.551293][ T5432] EXT4-fs (loop3): Total free blocks count 0 [ 172.618561][ T5432] EXT4-fs (loop3): Free/Dirty block details [ 172.624979][ T5432] EXT4-fs (loop3): free_blocks=2415919104 [ 172.646184][ T5432] EXT4-fs (loop3): dirty_blocks=32 [ 172.665472][ T5432] EXT4-fs (loop3): Block reservation details [ 172.704989][ T5432] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 172.878502][ T4457] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 172.960647][ T951] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 172.985682][ T5454] 9pnet_fd: p9_fd_create_unix (5454): problem connecting socket: éq‰Y’3aK: -111 [ 173.120480][ T951] usb 1-1: device descriptor read/64, error -71 [ 173.340570][ T4299] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 173.410390][ T951] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 173.555968][ T4299] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 173.579905][ T4299] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 173.596069][ T951] usb 1-1: device descriptor read/64, error -71 [ 173.606599][ T4299] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 173.620465][ T4299] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.720641][ T951] usb usb1-port1: attempt power cycle [ 173.856104][ T4299] usb 4-1: usb_control_msg returned -32 [ 173.862105][ T4299] usbtmc 4-1:16.0: can't read capabilities [ 173.900384][ T14] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 173.964526][ T27] kauditd_printk_skb: 141 callbacks suppressed [ 173.964541][ T27] audit: type=1326 audit(1750753093.452:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5468 comm="syz.2.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93e58e929 code=0x7ffc0000 [ 174.073371][ T27] audit: type=1326 audit(1750753093.452:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5468 comm="syz.2.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe93e58e929 code=0x7ffc0000 [ 174.096194][ T14] usb 2-1: Using ep0 maxpacket: 8 [ 174.113502][ T14] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 174.132249][ T14] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 174.147681][ T14] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 174.158321][ T14] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 174.170301][ T951] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 174.199342][ T27] audit: type=1326 audit(1750753093.452:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5468 comm="syz.2.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93e58e929 code=0x7ffc0000 [ 174.200774][ T14] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 174.236960][ T951] usb 1-1: device descriptor read/8, error -71 [ 174.244799][ T5472] usbtmc 4-1:16.0: usbtmc_ioctl_request failed -32 [ 174.269401][ T22] usb 4-1: USB disconnect, device number 17 [ 174.328884][ T27] audit: type=1326 audit(1750753093.452:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5468 comm="syz.2.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe93e58e929 code=0x7ffc0000 [ 174.342224][ T14] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 174.384639][ T5474] loop2: detected capacity change from 0 to 128 [ 174.391081][ T27] audit: type=1326 audit(1750753093.452:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5468 comm="syz.2.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93e58e929 code=0x7ffc0000 [ 174.414078][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.511248][ T951] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 174.560754][ T951] usb 1-1: device descriptor read/8, error -71 [ 174.670648][ T14] usb 2-1: usb_control_msg returned -32 [ 174.676318][ T14] usbtmc 2-1:16.0: can't read capabilities [ 174.683046][ T5478] loop4: detected capacity change from 0 to 128 [ 174.689722][ T5477] loop2: detected capacity change from 0 to 512 [ 174.693279][ T951] usb usb1-port1: unable to enumerate USB device [ 174.738301][ T5477] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.335: casefold flag without casefold feature [ 174.758355][ T5477] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.335: couldn't read orphan inode 15 (err -117) [ 174.785753][ T5477] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 174.872987][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 175.005454][ T5484] loop3: detected capacity change from 0 to 2048 [ 205.530508][ C1] hrtimer: interrupt took 30503048478 ns [ 205.559768][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 205.586273][ T4306] usb 2-1: USB disconnect, device number 18 [ 205.586746][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 310.570173][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 310.577442][ C0] rcu: 1-...!: (1 ticks this GP) idle=c5f4/1/0x4000000000000000 softirq=17115/17115 fqs=0 [ 310.588495][ C0] (detected by 0, t=10502 jiffies, g=21081, q=516 ncpus=2) [ 310.595840][ C0] Sending NMI from CPU 0 to CPUs 1: [ 310.601090][ C1] NMI backtrace for cpu 1 [ 310.601117][ C1] CPU: 1 PID: 4252 Comm: syz-executor Not tainted 6.1.141-syzkaller #0 [ 310.601135][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 310.601152][ C1] RIP: 0010:lock_release+0x1b6/0x910 [ 310.601198][ C1] Code: 04 28 84 c0 0f 85 fd 04 00 00 83 3d d7 4c 9b 0c 00 0f 84 a0 03 00 00 48 8b 7c 24 08 4c 8d b7 d8 0a 00 00 4d 89 f4 49 c1 ec 03 <43> 0f b6 04 2c 84 c0 0f 85 f6 04 00 00 41 8b 06 85 c0 0f 84 17 02 [ 310.601216][ C1] RSP: 0018:ffffc900001e0640 EFLAGS: 00000802 [ 310.601231][ C1] RAX: 0000000000000000 RBX: ffff88802f16a89c RCX: 9ce788e73f0e3300 [ 310.601243][ C1] RDX: 0000000000000000 RSI: ffffffff8a6c0cc0 RDI: ffff88802f169dc0 [ 310.601255][ C1] RBP: ffffc900001e0750 R08: dffffc0000000000 R09: fffffbfff1bfd0b6 [ 310.601268][ C1] R10: fffffbfff1bfd0b6 R11: 1ffffffff1bfd0b5 R12: 1ffff11005e2d513 [ 310.601280][ C1] R13: dffffc0000000000 R14: ffff88802f16a898 R15: 1ffff9200003c0d4 [ 310.601293][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 310.601307][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 310.601318][ C1] CR2: 00007f3c1d3c9d58 CR3: 000000005ca5b000 CR4: 00000000003506e0 [ 310.601334][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 310.601343][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 310.601354][ C1] Call Trace: [ 310.601360][ C1] [ 310.601371][ C1] ? debug_deactivate+0x29/0x240 [ 310.601391][ C1] ? __lock_acquire+0x7c50/0x7c50 [ 310.601414][ C1] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 310.601439][ C1] ? _raw_spin_lock+0x40/0x40 [ 310.601463][ C1] _raw_spin_unlock_irqrestore+0x6d/0x100 [ 310.601488][ C1] ? _raw_spin_unlock+0x40/0x40 [ 310.601510][ C1] ? debug_object_deactivate+0x63/0x340 [ 310.601533][ C1] debug_deactivate+0x29/0x240 [ 310.601551][ C1] __hrtimer_run_queues+0x2df/0xd60 [ 310.601572][ C1] ? taprio_free_sched_cb+0x190/0x190 [ 310.601598][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 310.601619][ C1] hrtimer_interrupt+0x3c5/0x9c0 [ 310.601648][ C1] __sysvec_apic_timer_interrupt+0x153/0x5a0 [ 310.601673][ C1] sysvec_apic_timer_interrupt+0x4d/0xc0 [ 310.601701][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 310.601718][ C1] RIP: 0010:seqcount_lockdep_reader_access+0x17b/0x1c0 [ 310.601739][ C1] Code: 00 4d 85 e4 75 16 e8 04 9e 0f 00 eb 15 e8 fd 9d 0f 00 e8 a8 58 9e 08 4d 85 e4 74 ea e8 ee 9d 0f 00 fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 3e 00 00 00 00 66 43 c7 44 3e 09 00 00 43 c6 44 3e 0b 00 [ 310.601753][ C1] RSP: 0018:ffffc900001e0bc0 EFLAGS: 00000246 [ 310.601766][ C1] RAX: ffffffff81713882 RBX: 0000000000000000 RCX: ffff88802f169dc0 [ 310.601778][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 310.601788][ C1] RBP: ffffc900001e0c70 R08: dffffc0000000000 R09: fffffbfff2117049 [ 310.601801][ C1] R10: fffffbfff2117049 R11: 1ffffffff2117048 R12: 0000000000000200 [ 310.601813][ C1] R13: 0000000000000000 R14: 1ffff9200003c178 R15: dffffc0000000000 [ 310.601828][ C1] ? seqcount_lockdep_reader_access+0x172/0x1c0 [ 310.601851][ C1] ? ktime_get_real_ts64+0x420/0x420 [ 310.601871][ C1] ? scsi_end_request+0x375/0xa20 [ 310.601896][ C1] ? scsi_end_request+0x375/0xa20 [ 310.601914][ C1] ktime_get+0x31/0x270 [ 310.601930][ C1] ? __blk_mq_end_request+0x4c/0x550 [ 310.601950][ C1] ? scsi_end_request+0x375/0xa20 [ 310.601968][ C1] __blk_mq_end_request+0x5a/0x550 [ 310.601988][ C1] ? scsi_end_request+0x375/0xa20 [ 310.602006][ C1] scsi_end_request+0x4f2/0xa20 [ 310.602027][ C1] scsi_io_completion+0x12e/0x390 [ 310.602047][ C1] blk_done_softirq+0x100/0x150 [ 310.602072][ C1] handle_softirqs+0x2a1/0x920 [ 310.602100][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 310.602127][ C1] ? do_softirq+0x200/0x200 [ 310.602153][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 310.602180][ C1] __irq_exit_rcu+0x12f/0x220 [ 310.602205][ C1] ? irq_exit_rcu+0x20/0x20 [ 310.602229][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 310.602258][ C1] irq_exit_rcu+0x5/0x20 [ 310.602281][ C1] common_interrupt+0xb5/0xd0 [ 310.602371][ C1] [ 310.602375][ C1] [ 310.602381][ C1] asm_common_interrupt+0x22/0x40 [ 310.602397][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x4/0x80 [ 310.602417][ C1] Code: 77 22 89 ff 89 f6 49 ff c0 4c 89 01 48 c7 44 11 08 05 00 00 00 48 89 7c 11 10 48 89 74 11 18 48 89 44 11 20 c3 90 48 8b 04 24 <65> 48 8b 0d e4 94 81 7e 65 8b 15 e5 94 81 7e 81 e2 00 01 ff 00 74 [ 310.602431][ C1] RSP: 0018:ffffc90004227420 EFLAGS: 00000246 [ 310.602444][ C1] RAX: ffffffff81dc887d RBX: ffffffff81dc87fd RCX: ffff88802f169dc0 [ 310.602457][ C1] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 310.602467][ C1] RBP: ffffea000000000f R08: dffffc0000000000 R09: fffffbfff2117049 [ 310.602480][ C1] R10: fffffbfff2117049 R11: 1ffffffff2117048 R12: dffffc0000000000 [ 310.602492][ C1] R13: 1ffff11027fff234 R14: 00000000000681e4 R15: ffff88813fff91a0 [ 310.602506][ C1] ? pfn_valid+0xcd/0x420 [ 310.602531][ C1] ? pfn_valid+0x14d/0x420 [ 310.602558][ C1] pfn_valid+0x14d/0x420 [ 310.602583][ C1] page_table_check_clear+0x1e/0x6b0 [ 310.602607][ C1] ? __page_table_check_pte_clear+0x3f/0x70 [ 310.602635][ C1] unmap_page_range+0x1924/0x2500 [ 310.602663][ C1] unmap_vmas+0x22c/0x330 [ 310.602679][ C1] ? unmap_vmas+0x189/0x330 [ 310.602695][ C1] ? unmap_page_range+0x2500/0x2500 [ 310.602712][ C1] ? __lock_acquire+0x7c50/0x7c50 [ 310.602733][ C1] ? mas_next_entry+0xdf9/0xea0 [ 310.602755][ C1] ? mlock_page_drain_local+0x75/0x490 [ 310.602775][ C1] ? memset+0x1e/0x40 [ 310.602794][ C1] exit_mmap+0x1cc/0x8e0 [ 310.602818][ C1] ? vm_brk+0x20/0x20 [ 310.602841][ C1] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 310.602865][ C1] ? exit_mm+0x1d6/0x2c0 [ 310.602896][ C1] ? uprobe_clear_state+0x274/0x290 [ 310.602912][ C1] ? mm_update_next_owner+0x525/0x650 [ 310.602937][ C1] __mmput+0x118/0x3c0 [ 310.602953][ C1] exit_mm+0x1e6/0x2c0 [ 310.602976][ C1] ? do_exit+0x2400/0x2400 [ 310.602998][ C1] ? taskstats_exit+0x35a/0x9d0 [ 310.603024][ C1] do_exit+0x8b9/0x2400 [ 310.603049][ C1] ? put_task_struct+0x80/0x80 [ 310.603073][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 310.603097][ C1] ? lock_chain_count+0x20/0x20 [ 310.603118][ C1] ? _raw_spin_lock_irq+0xab/0xe0 [ 310.603143][ C1] do_group_exit+0x217/0x2d0 [ 310.603166][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 310.603182][ C1] get_signal+0x1272/0x1350 [ 310.603215][ C1] arch_do_signal_or_restart+0xb0/0x1230 [ 310.603237][ C1] ? debug_object_free+0x2a2/0x3e0 [ 310.603258][ C1] ? hrtimer_nanosleep+0x298/0x340 [ 310.603275][ C1] ? __might_fault+0xc2/0x120 [ 310.603292][ C1] ? __might_fault+0xa6/0x120 [ 310.603310][ C1] ? nanosleep_copyout+0x110/0x110 [ 310.603327][ C1] ? get_sigframe_size+0x10/0x10 [ 310.603346][ C1] ? __remove_hrtimer+0x470/0x470 [ 310.603369][ C1] ? __se_sys_clock_nanosleep+0x2e6/0x370 [ 310.603396][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 310.603422][ C1] exit_to_user_mode_loop+0x70/0x110 [ 310.603445][ C1] exit_to_user_mode_prepare+0xb1/0x140 [ 310.603469][ C1] syscall_exit_to_user_mode+0x16/0x40 [ 310.603485][ C1] do_syscall_64+0x58/0xa0 [ 310.603507][ C1] ? clear_bhb_loop+0x60/0xb0 [ 310.603523][ C1] ? clear_bhb_loop+0x60/0xb0 [ 310.603539][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 310.603565][ C1] RIP: 0033:0x7fd0e19c11e5 [ 310.603584][ C1] Code: Unable to access opcode bytes at 0x7fd0e19c11bb. [ 310.603592][ C1] RSP: 002b:00007ffc4317b320 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 310.603608][ C1] RAX: fffffffffffffdfc RBX: 000000000000009a RCX: 00007fd0e19c11e5 [ 310.603620][ C1] RDX: 00007ffc4317b360 RSI: 0000000000000000 RDI: 0000000000000000 [ 310.603632][ C1] RBP: 00007ffc4317b3cc R08: 0000000000000000 R09: 0000000000000000 [ 310.603642][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000035 [ 310.603652][ C1] R13: 0000000000000064 R14: 000000000002a24a R15: 00007ffc4317b420 [ 310.603670][ C1] [ 310.604075][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g21081 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 311.395555][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=11304 [ 311.403485][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g21081 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 311.414887][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 311.424882][ C0] rcu: RCU grace-period kthread stack dump: [ 311.430808][ C0] task:rcu_preempt state:I stack:26912 pid:16 ppid:2 flags:0x00004000 [ 311.440061][ C0] Call Trace: [ 311.443364][ C0] [ 311.446332][ C0] __schedule+0x10e9/0x40d0 [ 311.450911][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 311.456169][ C0] ? _raw_spin_unlock+0x40/0x40 [ 311.461090][ C0] ? release_firmware_map_entry+0x18a/0x18a [ 311.467052][ C0] schedule+0xb9/0x180 [ 311.471174][ C0] schedule_timeout+0x15c/0x280 [ 311.476081][ C0] ? console_conditional_schedule+0x40/0x40 [ 311.482020][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 311.488043][ C0] ? update_process_times+0x1b0/0x1b0 [ 311.493463][ C0] ? prepare_to_swait_event+0x335/0x350 [ 311.499052][ C0] rcu_gp_fqs_loop+0x2f2/0x1310 [ 311.503945][ C0] ? rcu_gp_kthread+0x380/0x380 [ 311.508830][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 311.514968][ C0] ? rcu_gp_init+0x14b0/0x14b0 [ 311.519779][ C0] ? rcu_gp_cleanup+0xb4c/0xca0 [ 311.524693][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 311.529953][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 311.535189][ C0] rcu_gp_kthread+0x95/0x380 [ 311.539813][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 311.544956][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 311.550888][ C0] ? __kthread_parkme+0x162/0x1c0 [ 311.555950][ C0] kthread+0x29d/0x330 [ 311.560049][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 311.565202][ C0] ? kthread_blkcg+0xd0/0xd0 [ 311.569840][ C0] ret_from_fork+0x1f/0x30 [ 311.574396][ C0] [ 311.577456][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 311.583817][ C0] Sending NMI from CPU 0 to CPUs 1: [ 311.589057][ C1] NMI backtrace for cpu 1 [ 311.589065][ C1] CPU: 1 PID: 4252 Comm: syz-executor Not tainted 6.1.141-syzkaller #0 [ 311.589083][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 311.589093][ C1] RIP: 0010:__lock_acquire+0x4dd/0x7c50 [ 311.589120][ C1] Code: c8 8b 8c 24 d8 00 00 00 c1 e1 13 41 c1 e5 14 41 09 cd 45 09 fd 41 09 c5 48 8b 44 24 50 42 0f b6 04 00 84 c0 0f 85 22 62 00 00 <44> 8b 75 28 48 8b 44 24 78 44 89 68 20 48 8d 58 24 48 89 d8 48 c1 [ 311.589135][ C1] RSP: 0018:ffffc900001e03e0 EFLAGS: 00000046 [ 311.589150][ C1] RAX: 0000000000000000 RBX: 0000000000006000 RCX: 0000000000080000 [ 311.589161][ C1] RDX: 000000000000005e RSI: 0000000000000000 RDI: ffff88802f16a928 [ 311.589173][ C1] RBP: ffffc900001e0630 R08: dffffc0000000000 R09: 0000000000000001 [ 311.589185][ C1] R10: fffffbfff1bfd0b6 R11: 1ffffffff1bfd0b5 R12: ffff88802f16a918 [ 311.589198][ C1] R13: 00000000000c605e R14: ffff88802f16a884 R15: 000000000000005e [ 311.589209][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 311.589223][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 311.589235][ C1] CR2: 00007f3c1d3c9d58 CR3: 000000005ca5b000 CR4: 00000000003506e0 [ 311.589250][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 311.589260][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 311.589270][ C1] Call Trace: [ 311.589277][ C1] [ 311.589294][ C1] ? verify_lock_unused+0x140/0x140 [ 311.589318][ C1] ? verify_lock_unused+0x140/0x140 [ 311.589341][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 311.589367][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 311.589398][ C1] lock_acquire+0x1b4/0x490 [ 311.589419][ C1] ? __hrtimer_run_queues+0x63a/0xd60 [ 311.589440][ C1] ? read_lock_is_recursive+0x10/0x10 [ 311.589463][ C1] ? __rwlock_init+0x140/0x140 [ 311.589486][ C1] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 311.589510][ C1] ? advance_sched+0x6cc/0x970 [ 311.589539][ C1] _raw_spin_lock_irq+0x9f/0xe0 [ 311.589562][ C1] ? __hrtimer_run_queues+0x63a/0xd60 [ 311.589579][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 311.589606][ C1] __hrtimer_run_queues+0x63a/0xd60 [ 311.589627][ C1] ? taprio_free_sched_cb+0x190/0x190 [ 311.589652][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 311.589673][ C1] hrtimer_interrupt+0x3c5/0x9c0 [ 311.589700][ C1] __sysvec_apic_timer_interrupt+0x153/0x5a0 [ 311.589726][ C1] sysvec_apic_timer_interrupt+0x4d/0xc0 [ 311.589753][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 311.589770][ C1] RIP: 0010:seqcount_lockdep_reader_access+0x17b/0x1c0 [ 311.589792][ C1] Code: 00 4d 85 e4 75 16 e8 04 9e 0f 00 eb 15 e8 fd 9d 0f 00 e8 a8 58 9e 08 4d 85 e4 74 ea e8 ee 9d 0f 00 fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 3e 00 00 00 00 66 43 c7 44 3e 09 00 00 43 c6 44 3e 0b 00 [ 311.589807][ C1] RSP: 0018:ffffc900001e0bc0 EFLAGS: 00000246 [ 311.589820][ C1] RAX: ffffffff81713882 RBX: 0000000000000000 RCX: ffff88802f169dc0 [ 311.589832][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 311.589842][ C1] RBP: ffffc900001e0c70 R08: dffffc0000000000 R09: fffffbfff2117049 [ 311.589855][ C1] R10: fffffbfff2117049 R11: 1ffffffff2117048 R12: 0000000000000200 [ 311.589866][ C1] R13: 0000000000000000 R14: 1ffff9200003c178 R15: dffffc0000000000 [ 311.589882][ C1] ? seqcount_lockdep_reader_access+0x172/0x1c0 [ 311.589905][ C1] ? ktime_get_real_ts64+0x420/0x420 [ 311.589925][ C1] ? scsi_end_request+0x375/0xa20 [ 311.589944][ C1] ? scsi_end_request+0x375/0xa20 [ 311.589962][ C1] ktime_get+0x31/0x270 [ 311.589978][ C1] ? __blk_mq_end_request+0x4c/0x550 [ 311.589998][ C1] ? scsi_end_request+0x375/0xa20 [ 311.590015][ C1] __blk_mq_end_request+0x5a/0x550 [ 311.590035][ C1] ? scsi_end_request+0x375/0xa20 [ 311.590053][ C1] scsi_end_request+0x4f2/0xa20 [ 311.590073][ C1] scsi_io_completion+0x12e/0x390 [ 311.590094][ C1] blk_done_softirq+0x100/0x150 [ 311.590118][ C1] handle_softirqs+0x2a1/0x920 [ 311.590147][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 311.590174][ C1] ? do_softirq+0x200/0x200 [ 311.590199][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 311.590227][ C1] __irq_exit_rcu+0x12f/0x220 [ 311.590251][ C1] ? irq_exit_rcu+0x20/0x20 [ 311.590276][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 311.590304][ C1] irq_exit_rcu+0x5/0x20 [ 311.590327][ C1] common_interrupt+0xb5/0xd0 [ 311.590351][ C1] [ 311.590355][ C1] [ 311.590361][ C1] asm_common_interrupt+0x22/0x40 [ 311.590376][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x4/0x80 [ 311.590396][ C1] Code: 77 22 89 ff 89 f6 49 ff c0 4c 89 01 48 c7 44 11 08 05 00 00 00 48 89 7c 11 10 48 89 74 11 18 48 89 44 11 20 c3 90 48 8b 04 24 <65> 48 8b 0d e4 94 81 7e 65 8b 15 e5 94 81 7e 81 e2 00 01 ff 00 74 [ 311.590410][ C1] RSP: 0018:ffffc90004227420 EFLAGS: 00000246 [ 311.590423][ C1] RAX: ffffffff81dc887d RBX: ffffffff81dc87fd RCX: ffff88802f169dc0 [ 311.590436][ C1] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 311.590445][ C1] RBP: ffffea000000000f R08: dffffc0000000000 R09: fffffbfff2117049 [ 311.590458][ C1] R10: fffffbfff2117049 R11: 1ffffffff2117048 R12: dffffc0000000000 [ 311.590471][ C1] R13: 1ffff11027fff234 R14: 00000000000681e4 R15: ffff88813fff91a0 [ 311.590484][ C1] ? pfn_valid+0xcd/0x420 [ 311.590510][ C1] ? pfn_valid+0x14d/0x420 [ 311.590542][ C1] pfn_valid+0x14d/0x420 [ 311.590568][ C1] page_table_check_clear+0x1e/0x6b0 [ 311.590592][ C1] ? __page_table_check_pte_clear+0x3f/0x70 [ 311.590619][ C1] unmap_page_range+0x1924/0x2500 [ 311.590649][ C1] unmap_vmas+0x22c/0x330 [ 311.590664][ C1] ? unmap_vmas+0x189/0x330 [ 311.590680][ C1] ? unmap_page_range+0x2500/0x2500 [ 311.590698][ C1] ? __lock_acquire+0x7c50/0x7c50 [ 311.590718][ C1] ? mas_next_entry+0xdf9/0xea0 [ 311.590740][ C1] ? mlock_page_drain_local+0x75/0x490 [ 311.590761][ C1] ? memset+0x1e/0x40 [ 311.590780][ C1] exit_mmap+0x1cc/0x8e0 [ 311.590806][ C1] ? vm_brk+0x20/0x20 [ 311.590828][ C1] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 311.590852][ C1] ? exit_mm+0x1d6/0x2c0 [ 311.590878][ C1] ? uprobe_clear_state+0x274/0x290 [ 311.590894][ C1] ? mm_update_next_owner+0x525/0x650 [ 311.590919][ C1] __mmput+0x118/0x3c0 [ 311.590934][ C1] exit_mm+0x1e6/0x2c0 [ 311.590958][ C1] ? do_exit+0x2400/0x2400 [ 311.590980][ C1] ? taskstats_exit+0x35a/0x9d0 [ 311.591005][ C1] do_exit+0x8b9/0x2400 [ 311.591031][ C1] ? put_task_struct+0x80/0x80 [ 311.591055][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 311.591079][ C1] ? lock_chain_count+0x20/0x20 [ 311.591100][ C1] ? _raw_spin_lock_irq+0xab/0xe0 [ 311.591124][ C1] do_group_exit+0x217/0x2d0 [ 311.591146][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 311.591163][ C1] get_signal+0x1272/0x1350 [ 311.591196][ C1] arch_do_signal_or_restart+0xb0/0x1230 [ 311.591218][ C1] ? debug_object_free+0x2a2/0x3e0 [ 311.591241][ C1] ? hrtimer_nanosleep+0x298/0x340 [ 311.591257][ C1] ? __might_fault+0xc2/0x120 [ 311.591274][ C1] ? __might_fault+0xa6/0x120 [ 311.591292][ C1] ? nanosleep_copyout+0x110/0x110 [ 311.591310][ C1] ? get_sigframe_size+0x10/0x10 [ 311.591328][ C1] ? __remove_hrtimer+0x470/0x470 [ 311.591352][ C1] ? __se_sys_clock_nanosleep+0x2e6/0x370 [ 311.591379][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 311.591404][ C1] exit_to_user_mode_loop+0x70/0x110 [ 311.591428][ C1] exit_to_user_mode_prepare+0xb1/0x140 [ 311.591453][ C1] syscall_exit_to_user_mode+0x16/0x40 [ 311.591487][ C1] do_syscall_64+0x58/0xa0 [ 311.591509][ C1] ? clear_bhb_loop+0x60/0xb0 [ 311.591525][ C1] ? clear_bhb_loop+0x60/0xb0 [ 311.591546][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 311.591573][ C1] RIP: 0033:0x7fd0e19c11e5 [ 311.591585][ C1] Code: Unable to access opcode bytes at 0x7fd0e19c11bb. [ 311.591593][ C1] RSP: 002b:00007ffc4317b320 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 311.591609][ C1] RAX: fffffffffffffdfc RBX: 000000000000009a RCX: 00007fd0e19c11e5 [ 311.591621][ C1] RDX: 00007ffc4317b360 RSI: 0000000000000000 RDI: 0000000000000000 [ 311.591631][ C1] RBP: 00007ffc4317b3cc R08: 0000000000000000 R09: 0000000000000000 [ 311.591642][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000035 [ 311.591652][ C1] R13: 0000000000000064 R14: 000000000002a24a R15: 00007ffc4317b420 [ 311.591669][ C1]