last executing test programs: 2m55.504660709s ago: executing program 1 (id=97): syz_mount_image$exfat(&(0x7f00000041c0), &(0x7f0000000000)='./file1\x00', 0x810c90, &(0x7f0000000140)=ANY=[@ANYBLOB='iocharset=maciceland,utf8,errors=continue,utf8,uid=', @ANYRESHEX=0x0, @ANYRES16=0x0], 0x1, 0x1520, &(0x7f0000000440)="$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") open(0x0, 0x1cd142, 0x0) unlink(&(0x7f00000000c0)='./file1\x00') 2m55.234835514s ago: executing program 1 (id=98): r0 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0xd, 0x6a, 0x2f, 0x10, 0x1c9e, 0x9b02, 0x2942, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x7f, 0x40, 0x9, "", [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0xe2, 0x73, 0x2e, 0x0, [], [{{0x9, 0x5, 0x81, 0x3, 0x20, 0x6, 0x80, 0x6}}, {{0x9, 0x5, 0xe0339fed889b2a9a, 0x17, 0x20, 0x4, 0x2}}]}}]}}]}}, 0x0) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc211, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0xa0, 0xea, "", [{{0x9, 0x4, 0x0, 0xdb, 0x2, 0x3, 0x1, 0x0, 0x6, {0x9, 0x21, 0x0, 0x7, 0x1, {0x22, 0xb1a}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x9, 0x4, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x2, 0x9, 0x1}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0xc6, 0x9, 0x8, 0x8, 0x19}, 0x16, &(0x7f0000000080)={0x5, 0xf, 0x16, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x4, 0x6, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x12, 0x3, 0xe}]}, 0x5, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x1409}}, {0x3a, &(0x7f0000000100)=@string={0x3a, 0x3, "5022eac1a7628f8527f21adb64f28851ed5763f376f074e38dfb7bfc7ed476d8888953b5454c672741788a113aa7fbf13c9096f8a6f2a5fe"}}, {0x40, &(0x7f0000000180)=@string={0x40, 0x3, "7091d04746ea7c900ebdd427909310db77098a46bb0e699fa2ec216201669156bcf9b8ee3fbb4919d39db744985acfe37810ee41420b7315e1714039c975"}}, {0x12, &(0x7f0000000200)=@string={0x12, 0x3, "9063278a42b35e944a741c32666e57b3"}}, {0x5, &(0x7f0000000240)=@string={0x5, 0x3, "dd0245"}}]}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000080)="100c0601000000baf775aa1b71da", 0xe, 0xfffffffffffffffe) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)=@ipv6_delrule={0x24, 0x21, 0x11, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}]}, 0x24}}, 0x0) 2m52.044395916s ago: executing program 1 (id=101): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r0, &(0x7f0000002900)={0x2020}, 0x2020) fsopen(&(0x7f0000000000)='affs\x00', 0x1) unshare(0x20000400) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r1 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x10000100) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000001e1401002cbd7000720000000800030002000000080003"], 0x20}, 0x1, 0x0, 0x0, 0x20004001}, 0x8ccb120d243065fc) lseek(r0, 0x40000000000d, 0x0) getdents64(r2, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001100)=ANY=[@ANYBLOB="180000001e00010026de9f00f8dbdf2517000000000024aa"], 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x4008804) 2m51.800290999s ago: executing program 1 (id=103): clock_settime(0xe, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x4}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000a00)={0xffffffffffffffff, 0x110000002000002, 0x1, 0x4}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f00000003c0)={[{@nobarrier}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@inlinecrypt}, {@user_xattr}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0xd2, 0xb}}, 0x1c}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc0000, 0x194) lseek(r3, 0x2, 0x0) getdents64(r3, 0x0, 0x22) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000000)={0x8, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e23, @private=0xa010100}}}, 0x108) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000140)={0x8, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x6e1d, @multicast1}}}, 0x108) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000280)={0x8, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e25, @empty}}}, 0x108) ptrace$ARCH_SET_GS(0x1e, r4, 0x0, 0x1001) ptrace(0x10, r4) ptrace$cont(0x1f, r4, 0x3e, 0x5) r6 = getpid() syz_open_procfs(r6, &(0x7f00000003c0)='gid_map\x00') 2m49.875142551s ago: executing program 1 (id=107): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file2\x00', 0x0, &(0x7f0000000180)={[{@gid}, {@barrier}, {@nls={'nls', 0x3d, 'cp860'}}, {@nobarrier}, {@type={'type', 0x3d, "e481e91c"}}, {@gid}, {@nobarrier}, {@nobarrier}]}, 0xfe, 0x5e5, &(0x7f0000002900)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r1, 0xda8d) accept4$inet(r1, 0x0, 0x0, 0x800) shutdown(r1, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000100), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000440)={0x4, 0x1001, 0x4, {0xe, @win={{0x7, 0x2000005, 0x1, 0xc1}, 0x9, 0x6b9, 0x0, 0x8, 0x0}}, 0x4}) 2m42.651677448s ago: executing program 1 (id=119): r0 = syz_open_dev$amidi(&(0x7f0000000080), 0x9, 0x200120) r1 = syz_open_dev$video(&(0x7f0000000140), 0x8, 0x140) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000080)={0xa, 0x0, 0x4, {0xe7ff, 0x1, 0x406, 0x870}}) write(r0, &(0x7f00000002c0)="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", 0x1000) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb08004500001c000000200001907864010300ac1414aa05009078fffd0000"], 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1092, 0x210}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x40044}, 0x20000000) 2m41.324534798s ago: executing program 32 (id=119): r0 = syz_open_dev$amidi(&(0x7f0000000080), 0x9, 0x200120) r1 = syz_open_dev$video(&(0x7f0000000140), 0x8, 0x140) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000080)={0xa, 0x0, 0x4, {0xe7ff, 0x1, 0x406, 0x870}}) write(r0, &(0x7f00000002c0)="28cf83f96790e35254977dc70acf7ea8340e0dd86fd867cf0247ddcf06414403d2b32de46b0d5d770c7e7a9300443493e30f42812aff9ce1f9c4faeb1860d1661ccd4a0d9cb219fcb76eabc529eebfd10d0404a4108eea0f0b215a570cfdaf5aeb6ed6a4465e56babac244cecb1df380c567a555e7527569d4a82b7908ccd51b2835e8b61dd8dbacef5e881d70e7f70f2919649f211e251527623ce3a9ead6f55ef009ad4b8545060c3c46c6651addc658d7a4fd8b0d7d4b09e79b2561cfa208c4a92d96c10145ba50bb57d846f64309dc3cb203b468fd10c6770e25152db709cef587c5e77d541a1b0a03df053ca0af450e173db103bfe40669bcd20398b86f2bdc98d62a1c7e4d0e52152f3edfd8f44710ede4f51b5faadb1d692437794711a0f5d6a94f832262c3d9654cf16fe63cbab78f66786aa178a34d4ff1a6e56ac0b5460a167402f1720d8e20d769b158cbe1a406ab8d99b976002a708c9b885f067129b17e211a34a536c5b228dfd20bd3343177457370f1f481a5beb19f7ca58ad1b279883142e4134bd551e010dccd6449e0f96ffeea86e0fcc6d5fd6600e2fc0d06450aa9bd1e1f99e5ce15e05847e61cb2c25093eb68ecd30afc0230fb046e490c2a644a57fa2d856a5f93929a24721b1b0d16ff22aa2b50962ff8749b724ade3b996a114fe43e9b31440e45fe9a9b31022c7c148b0e26e32c01459c6e1b9c742230b9ca228a7e4d2e49b090a20a357c7f3bcbf83d7e7b1818f9b82cd9f5ba6e1e3aa01e3a36c447b9a7767227a74d53655b3a66b0cdf58525c61686071a3b86961bd0e8cf79e1054fb1cbe356e5c54c6c31fb8ae5fc719b7307368fc05f809b649d6d3c71ec0d0d7df27a5b193094157e01205789ea36ed1395b96a24d6de876216e252d0e8fe73fc39bff5d40f89991433a487cd24ddd745c06941e243ea3193ed962117e73e4ea88cfeeb26d2f00012ab559994cd2a40f33dda138fb23254f35709aeeaa622af18d8c720237bc9d6ee6112b7bfc1ced5b1e4676067b54da703d22befdace998ad9b3a0e06cab9c6342dbbb8837640ca1d714edf81bf3f98c3bb0780259911b622af2675f79357474191fbbc7476d9366e953ab8032abcfdfaa15fdcc3ef7cf366ff13fae70e3d1f72122ef081b4bfc3b55dfbca429317542da2b43b8bacae8008805cb5326b75f499ed3ccd4a8b3804ac121b4649bc611a2e5435c1709320bc3b0a3451667b4a691884893899c1bc72a77a229f4a32bd089ec2850a47aecad0f526087285060909516c88e4df3498c4bc2ede0a46095c5cfa42aa7a6793f316bf71d2a1b9aad248e383f7b2fdb8ee768be3427864b2d4319b191cc70cd3a03f0f31c1cac1e63e764cc38ca7aa0de28c86ec97843c6ae4d7c507793559bd20ca42792f4442dccff2da173d11676bbcb605fd61aa1c268b9a2a94c8478a756fef16fedf546400110ac4f8b44646a4665255e2d236263e77e809f7e6a13c275f3fdc57ce645a4a4c7ebecc1141f766a4765666865db21bac10d908b343fed5ae62d806424bb3ec563786f573fcfc7e1ae1502cda13a6fc32b8279579eef5e2701ae9471b1576fd14390deb13c9995844a23bc68cf1f0b2223c5cc2966cdc0606381d2ee14519bf17e36e5268e01717071d3d669e68f428ce726b0e7b15dc6d54fdcfd8ed1368a26e232019fb58da3eadba4722eacea7a1a48892ca67cec1be99b655a399041b6e042c21ad2e9565a03271785ac874082fcea497aaf8a9b639e5124022dbf4c534f4861aff4fe607979aa526590d4d68718fe931b3895e9fdb40973ec5ec24173b269cb4dfee51845d296f22f490184f973560303583a2e0b8cf57dfe264d46de2dbe6de2b13529d4904ba5e22cdc4dfbf14ccabd18b0efee10f421190748d286bd1e04e84b146ba4f9fbbe426e5d40af38529e28e7599961e244d9086a2c1a6fe33745a1351fe65df18deb013ff1e4023eb1eda6db7d7a9065bbba15fb173f03dd1945e7bb328218bc9bb8608f923e821034596129de49cc5970fad8a2bd0d46a2d685fa7dbb5911462011feb1f26dfc9bc9c7755eb6bebfafad8c48b844149f21acd1d1bf301808e3141307842d346c876a2eea6b76644208137a770dd5d8a11392011109fc7ee4efea1412e2d21fe1191fec8c579b78a0abe4a26f8fac6e84aca736d297677077e51cc8a814e50d6eb6cb1a5d1a6fb35248c28a0e4cf620e8e1d8233ccdd3da0d33546447766913f52ba90ee47507d1fce1357237d6700a1afb1eee3e8f2e26aab97053f734a80a3a3f60c7506cc4bcc1a2eb6aac37b49d41bfe5a12a6d4cc3e0c608a3062bcc9002ed63d7c30b49e15c51ef5268e7859689ca2a9eaebbfaf4e4d8cb21237bd738fac4eaa9d01bfa20dcffea1b1d854ad104e588a3b0a0f8a62a7b6e72c77adc2cd0722450dc996d198012f4b483b009613f3f2ca778b1f74b430ad36af517d85036c3e678fa388df0786b65e6011cd6c826eabd5055796de7d4b4dbe9e35e9c1864883942e9c366c25334cce7a2e3185c45c44b218b41e43f627c5057d01c7a2689cd35d4dc4f83835a134a770139559ceeb079e6ed4671c9b77a604836958d781cd32a52d2c76936795e58569106c3bd633d8d5903e3d6814aa6339a030badf823188e3a26d3782bdab42d5db2ba751bbda30baec63685098e58941ab3adbcae1198c3e8fa659b5750d64407c95471abbdc05a4689f9351e71a7f7d17f45358187d594e7b65fabe905d8fae4286b4d5df619c9d3f5e5869f19d7bd2d897ac5f9095684b18b0a3a59896e5476dcf4944b0f08b7c685fc7fcb0b0efef6f475940ca0f02cd282f62b88b1fec5e8660c57db2d4f08ce342dbba6ad1424c675935a58d85a431e7934c23a4144aeb48ba16be2ba3a0e34c0a41c77097345ca99945015f80e8bc07f4100a4ee1008980f15301948359e07940c678c676e2652fb2e6dc22358df635264abb4d1caf4d8550b6d2e8bafd53c5bce454e2663726a386325a5d6822a19b09f5b772c2f48a329af7a32a4cb4f61d18e44ef10f77cd67297c8e3d288be68c935e9d85251e2a367a9cda58fe9bb00b6cd40a88ba53a8b7e336867d767cf3fbc90ca3100a6192ea8f050507ca6c4d377e48556a3762cf218d176879c56e11940b9a14741054269653e1807b9eff8af1fd8ce1a2091115ba2a985973973df7bd1cfdddc1dfa6166de7a0b1dd6ca8fdb8e7deb10617c20e8633d4551a018f9d9e92f4d97a59730414bc0655f3e61fef4bf72daedb5b0b7762e68cd3b55df8aebcd2dbe9d8afe28c97aa2f58f5424b50472768d43afc17bfeafe86567dd2eae994022fde0f7cc54286ed2f793ace0a835ddbf4c7f69adb4d836f123d2b7c5f1beffc2919882f24a144d51c06b6921a3b55b95debef47d8618bfa3d603ffdaa02cb055119e035b6e7e0fc733b6944b6facaf3affa052b2991838f422ea78ba3c8dc71f04b907e4fbcb9241f0cba465c0d322921114d833411c3a56e974690be0eba6ef10600ad1d4deac8eed332ba804a750c5c330a0d620f51722ed2a9f7dd8f214bb2f1ef06599dbb01454435894ba687407ee4e8314cbe0ac13fc93f36bb2463a3966f0e85b614954b09a3b6a69ebeebe70ce676f63c5babc10b96fb6c21389fef9cc635c0a27936bc3b4dd440ca610e74df9c9ac88f41c3e0fae958081f738fb9eff3f4274aae10a07c393b6e5fce2c6fbc8aaf51c92cabbc92acfedf0ff2269a0f98ec418614079a1d4de0cc5fab2621c3a9a0cc8bde4a99e66b87af4e223f75b39cdcffc15962ef0bd1e399de1343918e1790c29ad6aad7c89560f74afc1115aefd06b468aef24a622ae994ef7985c0c6d2b1c7a4e342fb8e6c64ece7e71727e0a3e4320d76acbb5888d3fb86cb279ebdf215787a746767471c0bcea10cedd3a9d15828279879fe4c77c135b7d8ec05463bbc42af1170e187b2caa28d376f93e38eef59c4374d1fc647939b83e292ac08f0967144d7a1aca3837924b832ba860b80f6cb1cd2af9d518735eae713262cd13edf56e66c93cf05bed50238778e0c42916c30defd397492c845f0f5d85b5e6ae60bb635d0d1f505863abb0bee61214936e41255ede8a20296931ece4be95448daf3e7b8e90a847dd29be97b0c8e020bac499349138869f2dbbdd30f9559a859fe98e4afbc57e93589b4de837215636f8d94561511c3ca4103637b7a98c815dd9587d1f1fc1e14779da748b0cf65aeda5f01d678f9c86ef244fe8f184da06503cfebbca39970ea2b88868dfe41c078b89e27cc605b60da92b060b2b96c008dcdbf0c81c9ab27bc2ce40374fe944aec50d6b9fbff58359fee41f916bfbf6080a53102236b97ecaba70cd841aa3e4183b209adb3bf3f90808fe63e097f3d3f16b9158e68ca7e44ce6ffb8f036a186ed92ec04528f4916dd9133b3820a8cfb7fce13ad2a8fee9be793dd20ef125597bf1cd796bc1dadb1beba8cc3cc979e7d56e07b02d206e01aef448fdf2c4576e3b861a7eab9660efa545d24213664a89815d9ea664d8e51d0473534ad3dd469f4f399c5e25d392c06cc41260f804acbfd1d1fe0edf5d82b0de66774fe2636da132c7beb9d70df609862b62685a06e3d6f139488b2b8db4b383aeca79e44cb157c35401d0bfbd1606788ccc0f2254a141e34e805960c2a31b33397003a7abbeda71af8ad4637530bbe589e70688e2ee746511cf02ae6eef4253b3fc532ee10dc6d7413499731f9a185335348b085f0cc1dcff75c78218281696e7ac8ba4df165d10e8f8013da5f1346c9146313136dc561da514db02e43a6572e58bddedb5581853ab7bd09496d04bf984b0c16d82e3b80574e263fab0997c77cf6f21f0f4fc346de0ff0e8b49f31d9f007b7ee8d9e78d8b0cc4e9d581f2f4bebaf4b7545bedc885c3ff0ae733c61e81974ba94bd9a5a1edba2fa8145bb464b5625a5d2bf3f30dd12b08d221353b6b62e0fd0a5ea0af56f57ba2a2a18ff6f09e040dfe41d51361d90cd5921e64a13d2d768a784cf3e20af02d429ac55f697dffbe0670dda5c6b6b542dc14af75d466e5744cd38f223486e05f4502a665614ed06d178e5f39a254233f70c0d91758a7a145f8fae2473eae3beb11105616b90b027ecdbb0906a0dd3a959dad83e27398f129a80d4e6e4b16eaee97f482f75118f0998549a63fdb17326e8bdec7024c6ff5613784f49d74b89908dc8df4002ebce79091890317c1253bb78e9017a9e03a0d07a5ad2b60323b4b26f67d6745c847dc0f0bfa7242e24666a9dd0a12ca2350ddd1e63cd80d1b95b576fec1a3d61d8487cf694aaa612321a3bb338b69ef26c0405e3e971695ebd87bd8eb35f29f46ea5fabeeefdeb60eeaed1ffa5e39027f9c36604611649c6e94cf77a34a6af381a5a080c15e55938321448c7b787e581fc642022efe857a65a898a351bb722236b2cd5cb42f46fcc3675e9f092c10ac6ee77a32d571954300a39d7bca9c5e9ddaec567bcfed47939f02024dbbc0cd6c2d2187de7de01faa58841bcaeefe60370da6c2613d5fa8fd38ccc665b2fb69c3b336a2d7900e3c94b4303901612a4db6449023f1b45675f2644c09cd924fad9e1881f22c1ba9d81fe99e24b18f00b83fb07721a9835a7c31cd531433283413588a24d922403d315e990feb8b74dffe4d3f964669bfd3f230156f4131478368841217193890d6cd8e2938a6861f2e4bf36bae9faf702f8c12ca59b97ae7667ff5acd5fadb2ac7c9b63389f7b209cfd03c072e473b17aa6d4254e", 0x1000) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb08004500001c000000200001907864010300ac1414aa05009078fffd0000"], 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1092, 0x210}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x40044}, 0x20000000) 11.43541595s ago: executing program 4 (id=388): unshare(0x8040480) unshare(0x28000600) syz_open_dev$dvb_frontend(0x0, 0x0, 0x40002) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe0}, 0xe000}], 0x68000, 0xe000) 8.471498984s ago: executing program 4 (id=395): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0x0, 0x7ffffffb}]}) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="14"], 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x8008000) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x1, r0, &(0x7f0000000100)="653de841f0", 0x5, 0x8000}]) 8.212126526s ago: executing program 2 (id=396): r0 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0xfffffd24, 0x0}, 0xa248}], 0x1, 0x40000000, 0x0) 7.989315124s ago: executing program 4 (id=398): pipe2$9p(0x0, 0x0) r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc081, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8, 0x4, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x81}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.873049765s ago: executing program 3 (id=399): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f00000000c0)=0x573, 0x4) 6.28208865s ago: executing program 2 (id=400): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) 6.227158629s ago: executing program 3 (id=401): ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000000)=@generic={0x8}) 5.989382426s ago: executing program 2 (id=402): r0 = epoll_create1(0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000180), 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) syz_io_uring_setup(0x66da, 0x0, 0x0, 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200000100000085000000860000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 5.799460218s ago: executing program 3 (id=403): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = gettid() rt_sigtimedwait(&(0x7f0000000000)={[0xe]}, 0x0, 0x0, 0x8) tkill(r1, 0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x6, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140), 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 4.967788887s ago: executing program 3 (id=404): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x9, 0x1, 0x56d, 0x2, 0x20020, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) setxattr$system_posix_acl(0x0, &(0x7f0000000140)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) rmdir(0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) getpid() listen(0xffffffffffffffff, 0x90004) sendmsg$key(0xffffffffffffffff, 0x0, 0x24000000) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100"], 0x16) syz_open_dev$sndctrl(0x0, 0x0, 0x8801) syz_usb_connect(0x2, 0x24, &(0x7f0000000940)=ANY=[@ANYBLOB="120100007f107240450c8062fcd5000000010902120001fc0000010904"], 0x0) 4.964046515s ago: executing program 0 (id=405): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r0, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f0000000240)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) 4.274447528s ago: executing program 0 (id=406): eventfd(0x2081) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 4.100248699s ago: executing program 4 (id=407): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r0, &(0x7f0000000380)={@val={0x8, 0x800}, @val={0x0, 0x1, 0x6, 0x4, 0x7, 0x48}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x5, 0x65, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}, {[@generic={0x82, 0x2}]}}, {0x4e26, 0x4e20, 0x4d, 0x0, @gue={{0x2, 0x1, 0x3, 0x1, 0x100}, "7f23c5fb59f2e54ced929a6e6d98d1d41f669cfd546c57c7a3c4abcd756c42e96dacfa8f9b8e0417f46a020b8f7270fd0918fd04b9f7872f68f78c5959"}}}}, 0x73) 3.093017635s ago: executing program 0 (id=408): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x1, r0, &(0x7f0000000100)="653de841f0", 0x5, 0x8000}]) 2.831526632s ago: executing program 2 (id=409): socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000800), 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xff00000000000000, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.534283331s ago: executing program 0 (id=410): r0 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d000100000c00000000000007000000", @ANYRES32, @ANYBLOB="400096040a000200aaaaaaaaaa0c000006000500010000007fd4aa5f4f0fc1d0fa9b7751ac55de0b80cb7904c18d9ceeffe0f170972219cb6930ab2bccd08925cd811344b053a0e966002e4464c4903b870fd4955965397ccc55f331f20709d2f628a018b62534f120410b416332bea4dc8494dff6"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000240)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "268435", 0x18, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0xf3d8, 0x0, 0x0, {[@sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) 2.422711219s ago: executing program 4 (id=411): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) 2.419711045s ago: executing program 3 (id=412): ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000000)=@generic={0x8}) 1.749032757s ago: executing program 3 (id=413): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x23, 0x5, 0x0) listen(r1, 0x800) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) socket$nl_route(0x10, 0x3, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000002, 0x3, 0xfffffffffffffffd, 0x3, 0x80, 0x1}, 0x0, &(0x7f0000002080)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x663, 0x7ffffffb}, 0x0, 0x0) r6 = pidfd_getfd(r5, r1, 0x0) read$char_usb(r6, &(0x7f0000000f40)=""/4096, 0x1000) fcntl$dupfd(r0, 0x0, r2) accept4(r1, 0x0, 0x0, 0x80000) 1.747606997s ago: executing program 4 (id=414): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_recovery\x00', 0x1, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x540, 0x280, 0x1b0, 0x370, 0x370, 0x370, 0x470, 0x470, 0x470, 0x470, 0x470, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x84}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xb}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x7f, 0x4}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff}, {0x1}, {0x87}, 0xfffffffd}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x370}}, {{@ipv6={@empty, @private0, [0xff, 0x0, 0xffffff00, 0xffffffff], [0xffffff00, 0xffffff, 0x0, 0xffffffff], 'geneve0\x00', 'xfrm0\x00', {0xff}, {}, 0x3a, 0x5, 0x0, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010100, @ipv4=@loopback, 0x0, 0x4}}}, {{@ipv6={@private1, @local, [0xffffff00, 0xff, 0xff000000, 0xff], [0xff, 0xff, 0xffffffff, 0xff], 'veth0_to_bridge\x00', 'dummy0\x00', {0xff}, {}, 0x0, 0x3, 0x2, 0x50}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30}, {0x62, 0x8, 0x7, 0xb, 0x30ba, 0x222}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = gettid() timer_create(0x1, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r4, 0x0) accept4(r4, 0x0, 0x0, 0x0) 892.318064ms ago: executing program 2 (id=415): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r0, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f0000000240)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) 707.211921ms ago: executing program 0 (id=416): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) close(r0) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) 111.989655ms ago: executing program 2 (id=417): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 0 (id=418): eventfd(0x2081) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) kernel console output (not intermixed with test programs): y_hcd [ 183.457356][ T13] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 183.605622][ T1681] usb 3-1: config 9 has an invalid interface number: 18 but max is 0 [ 183.605664][ T1681] usb 3-1: config 9 has no interface number 0 [ 183.605696][ T1681] usb 3-1: config 9 interface 18 has no altsetting 0 [ 183.625742][ T822] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 183.625775][ T822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.625795][ T822] usb 1-1: Product: syz [ 183.625809][ T822] usb 1-1: Manufacturer: syz [ 183.625823][ T822] usb 1-1: SerialNumber: syz [ 183.678815][ T1681] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice=78.ca [ 183.678849][ T1681] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.678871][ T1681] usb 3-1: Product: syz [ 183.678887][ T1681] usb 3-1: Manufacturer: syz [ 183.678903][ T1681] usb 3-1: SerialNumber: syz [ 183.714924][ T822] usb 1-1: config 0 descriptor?? [ 184.018780][ T1681] usb 3-1: USB disconnect, device number 4 [ 184.454654][ T13] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 184.463195][ T13] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 184.502273][ T13] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 184.537138][ T3072] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 184.737007][ T5723] usb 5-1: USB disconnect, device number 5 [ 184.778187][ T159] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 184.911444][ T6393] loop2: detected capacity change from 0 to 256 [ 184.915968][ T6393] exfat: Deprecated parameter 'utf8' [ 184.916019][ T6393] exfat: Deprecated parameter 'utf8' [ 184.942339][ T57] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 184.945251][ T3072] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 184.945511][ T3072] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 184.945854][ T3072] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 184.946067][ T3072] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 184.946275][ T69] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 184.946693][ T3072] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 184.947012][ T69] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 184.947645][ T3072] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 184.948126][ T69] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 184.948369][ T69] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 184.948723][ T57] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 184.982844][ T69] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 185.073229][ T3072] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 185.094825][ T3072] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 185.099766][ T3072] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 185.115697][ T159] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 185.123259][ T159] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 185.132758][ T69] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 185.163480][ T3072] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 185.174345][ T159] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 185.174785][ T3421] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 185.177813][ T3072] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 185.184515][ T69] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 185.184569][ T69] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 185.186134][ T69] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 185.186172][ T69] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 185.191757][ T3072] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 185.192299][ T3072] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 185.192836][ T3072] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 185.193045][ T6393] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 185.222754][ T3421] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 185.249211][ T3421] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 185.262728][ T3421] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 185.273422][ T69] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 185.275176][ T69] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 185.361287][ T6395] loop4: detected capacity change from 0 to 1024 [ 185.382436][ T69] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 185.382505][ T69] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 185.383833][ T69] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 185.383916][ T57] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 185.398799][ T69] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 185.398864][ T69] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 185.414700][ T57] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 185.427819][ T57] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 185.436667][ T159] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 185.452237][ T6395] EXT4-fs: inline encryption not supported [ 185.452356][ T6395] EXT4-fs: Ignoring removed bh option [ 185.505494][ T159] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 185.508043][ T6395] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 185.508064][ T6395] EXT4-fs (loop4): inodes count not valid: 32 vs 27 [ 185.534118][ T159] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 185.534227][ T159] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 185.534246][ T159] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 185.534827][ T159] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 185.536740][ T69] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 185.536793][ T69] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 185.555229][ T3373] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 185.599969][ T69] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 185.600995][ T69] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 185.601958][ T69] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 185.602891][ T69] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 185.606219][ T3373] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 185.612775][ T3373] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 185.614519][ T37] audit: type=1800 audit(1778452986.981:5): pid=6393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.149" name="file1" dev="loop2" ino=1048629 res=0 errno=0 [ 185.687846][ T3373] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 185.696892][ T3373] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 185.904108][ T5613] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 186.149315][ T6395] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 186.228474][ T3072] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 186.283872][ T822] usb 1-1: f81604_read: reg: 105 failed: -ETIMEDOUT [ 186.283894][ T822] f81604 1-1:0.0: Setting termination of CH#1 failed: -ETIMEDOUT [ 186.283919][ T822] f81604 1-1:0.0: probe with driver f81604 failed with error -110 [ 186.419558][ T5614] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 186.808108][ T5613] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 187.000301][ T93] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.130244][ T93] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.351684][ T93] bond0 (unregistering): Released all slaves [ 187.538961][ T6411] loop3: detected capacity change from 0 to 16 [ 187.561735][ T6411] cramfs: Unknown parameter 'W' [ 187.565189][ T6411] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 188.603930][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1 [ 188.685572][ T6416] loop3: detected capacity change from 0 to 4096 [ 188.738623][ T4887] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 188.749670][ T3421] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 188.749718][ T3421] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 188.752422][ T3421] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 188.752459][ T3421] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 188.752796][ T5601] usb 1-1: USB disconnect, device number 10 [ 188.757604][ T1382] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 188.758427][ T1382] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 188.762539][ T6416] ntfs3(loop3): ino=3, mi_enum_attr [ 188.763734][ T6416] ntfs3(loop3): Failed to load $Volume (-22). [ 188.767141][ T1382] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 188.769243][ T1382] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 188.772224][ T1382] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 188.773897][ T1382] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 188.780466][ T1382] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 188.791585][ T1382] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 188.798376][ T1382] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 188.799299][ T1382] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 188.800043][ T1030] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 188.805806][ T1382] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 188.809959][ T1030] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 188.810701][ T1030] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 188.811376][ T1382] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 188.812466][ T1030] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 188.821000][ T1382] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 188.821053][ T1382] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 188.821079][ T1382] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 188.832955][ T1030] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 188.841704][ T1030] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 188.844099][ T3421] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 188.844846][ T3421] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 188.845531][ T3421] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 188.847005][ T3421] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 188.847683][ T3421] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 188.848361][ T3421] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 188.849007][ T3421] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 188.977450][ T6417] loop2: detected capacity change from 0 to 1024 [ 189.237470][ T5790] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 189.241245][ T3072] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 189.244458][ T3373] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 189.282625][ T3072] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 189.298108][ T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 191.175708][ T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 191.281951][ T3072] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 191.282845][ T3072] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 191.587348][ T3072] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 191.588849][ T3072] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 191.594505][ T3072] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 191.610548][ T3072] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 191.622614][ T3072] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 191.624878][ T4887] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 191.957693][ T69] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 191.992375][ T57] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 192.022786][ T159] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 192.061996][ T6419] comedi comedi1: 8255: I/O base address not correctly aligned [ 192.200265][ T3072] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 192.203395][ T4887] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 192.204377][ T4887] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 192.208670][ T1382] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 192.208716][ T1382] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 192.208745][ T1382] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 192.208772][ T1382] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 192.208800][ T1382] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 192.237711][ T3072] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 192.237761][ T3072] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 192.237787][ T3072] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 192.241592][ T6417] hfsplus: failed to load extents file [ 192.516335][ T5855] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 192.646513][ T6431] syz.4.159 (6431): drop_caches: 4 [ 194.232992][ T6431] loop4: detected capacity change from 0 to 128 [ 194.268725][ T1382] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 194.275800][ T3072] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 194.287879][ T3072] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 194.290573][ T6431] FAT-fs (loop4): error, invalid access to FAT (entry 0x06fffff8) [ 194.294360][ T6431] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 194.773988][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.774106][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.444906][ T6455] x_tables: ip_tables: udp match: only valid for protocol 17 [ 196.058855][ T6462] sctp: [Deprecated]: syz.0.164 (pid 6462) Use of int in max_burst socket option. [ 196.058855][ T6462] Use struct sctp_assoc_value instead [ 196.104974][ T6462] loop0: detected capacity change from 0 to 512 [ 196.155976][ T6462] EXT4-fs: Ignoring removed nobh option [ 196.175979][ T1382] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 196.188912][ T1382] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 196.190847][ T6462] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 196.214915][ T1382] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 196.215087][ T1382] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 196.237286][ T4887] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 196.240479][ T4887] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 196.246038][ T4887] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 196.268494][ T4887] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 196.277947][ T4887] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 196.291618][ T4887] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 196.293294][ T4887] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 196.294522][ T4887] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 196.298000][ T4887] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 196.524642][ T5790] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 196.910760][ T5273] 8021q: adding VLAN 0 to HW filter on device eth2 [ 197.166345][ T1681] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 197.362466][ T1681] usb 5-1: Using ep0 maxpacket: 32 [ 197.369248][ T822] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 197.369513][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 197.399271][ T1681] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 197.399308][ T1681] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.501163][ T822] usb 4-1: device descriptor read/64, error -32 [ 197.566600][ T1681] usb 5-1: config 0 descriptor?? [ 197.805342][ T1681] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 197.980872][ T822] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 198.137534][ T6485] loop0: detected capacity change from 0 to 22 [ 198.161148][ T822] usb 4-1: Using ep0 maxpacket: 32 [ 198.192067][ T822] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 198.223918][ T6485] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 198.227272][ T1681] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 198.234703][ T4887] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 198.248091][ T4887] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 198.263046][ T1681] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 198.263142][ T1681] usb 5-1: media controller created [ 198.272083][ T3072] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 198.318486][ T1681] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 198.344064][ T822] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 198.344095][ T822] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 198.344115][ T822] usb 4-1: Product: syz [ 198.344129][ T822] usb 4-1: Manufacturer: syz [ 198.344145][ T822] usb 4-1: SerialNumber: syz [ 198.606421][ T822] usb 4-1: config 0 descriptor?? [ 198.613594][ T6472] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 198.636218][ T822] hub 4-1:0.0: bad descriptor, ignoring hub [ 198.636257][ T822] hub 4-1:0.0: probe with driver hub failed with error -5 [ 198.703547][ T1681] az6027: usb out operation failed. (-71) [ 198.708955][ T1681] az6027: usb out operation failed. (-71) [ 198.708975][ T1681] stb0899_attach: Driver disabled by Kconfig [ 198.708986][ T1681] az6027: no front-end attached [ 198.708986][ T1681] [ 198.738211][ T1681] az6027: usb out operation failed. (-71) [ 198.738233][ T1681] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 198.829371][ T4887] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 198.829551][ T6485] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 198.830213][ T3072] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 198.830245][ T3072] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 198.830269][ T3072] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 198.899548][ T4887] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 198.908654][ T3072] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 199.064747][ T1681] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input6 [ 199.514611][ T822] usb 4-1: USB disconnect, device number 4 [ 200.583926][ T1681] dvb-usb: schedule remote query interval to 400 msecs. [ 200.583958][ T1681] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 200.740539][ T1681] usb 5-1: USB disconnect, device number 6 [ 201.862403][ T6495] loop2: detected capacity change from 0 to 262144 [ 201.889897][ T1382] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 201.918829][ T1382] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 202.681177][ T1382] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 202.681514][ T6495] F2FS-fs (loop2): invalid crc value [ 202.689863][ T57] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 202.724970][ T830] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 202.777215][ T57] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 202.785275][ T5803] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 202.850090][ T3373] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 202.850939][ T3373] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 202.926655][ T3373] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 203.012705][ T830] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 203.023213][ T6495] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 203.030458][ T3373] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 203.319437][ T5614] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 203.689790][ T6517] netlink: 'syz.3.171': attribute type 30 has an invalid length. [ 205.602572][ T1681] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 205.632773][ T5273] 8021q: adding VLAN 0 to HW filter on device eth4 [ 206.227324][ T6533] loop3: detected capacity change from 0 to 1024 [ 206.273933][ T6533] EXT4-fs: Ignoring removed bh option [ 206.310657][ T4887] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 206.318309][ T4887] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 206.342296][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 206.342307][ T69] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 206.342368][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 206.342633][ T13] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 206.344884][ T830] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 206.348219][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 206.369471][ T830] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 206.408314][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 206.417266][ T13] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 206.417477][ T13] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 206.420667][ T1030] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 206.421486][ T1030] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 206.421526][ T1030] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 206.421551][ T1030] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 206.422342][ T1030] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 206.424623][ T1030] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 206.428308][ T69] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 206.430378][ T69] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 206.477192][ T6533] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.523067][ T1030] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 206.566869][ T69] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 206.581890][ T5615] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 206.638293][ T37] audit: type=1800 audit(1778453008.001:6): pid=6539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.176" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 206.663122][ T37] audit: type=1800 audit(1778453008.031:7): pid=6539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.176" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 206.815599][ T93] hsr_slave_0: left promiscuous mode [ 206.851991][ T93] hsr_slave_1: left promiscuous mode [ 206.930573][ T93] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.930661][ T93] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.005613][ T6543] loop0: detected capacity change from 0 to 256 [ 207.011695][ T1030] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 207.038514][ T6545] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 207.038532][ T6545] overlayfs: missing 'lowerdir' [ 207.044297][ T159] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 207.044362][ T159] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 207.044386][ T159] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 207.044406][ T159] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 207.044425][ T159] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 207.044445][ T159] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 207.044464][ T159] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 207.045001][ T159] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 207.045799][ T159] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 207.045894][ T159] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 207.050677][ T830] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 207.054329][ T159] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 207.056125][ T159] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 207.057181][ T159] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 207.059271][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 207.066210][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 207.066355][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 207.066467][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 207.066576][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 207.066694][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 207.066803][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 207.068045][ T830] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 207.068664][ T830] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 207.074648][ T830] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 207.074823][ T830] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 207.075096][ T5613] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.075924][ T159] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 207.081181][ T69] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 207.083555][ T159] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 207.085457][ T159] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 207.120033][ T93] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.120062][ T93] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.173286][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 207.186627][ T159] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 207.187191][ T159] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 207.209255][ T159] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 207.209342][ T159] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 207.213810][ T159] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 207.214353][ T159] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 207.214563][ T159] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 207.214774][ T159] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 207.215031][ T159] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 207.215153][ T6543] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 207.215770][ T159] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 207.358311][ T5613] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 207.981408][ T3072] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 207.996824][ T93] veth1_macvtap: left promiscuous mode [ 207.997104][ T93] veth0_macvtap: left promiscuous mode [ 207.997445][ T93] veth1_vlan: left promiscuous mode [ 208.068697][ T93] veth0_vlan: left promiscuous mode [ 208.337702][ T830] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 208.350798][ T830] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 208.378875][ T5615] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 209.280090][ T93] team0 (unregistering): Port device 5 removed [ 209.329745][ T93] team0 (unregistering): Port device team_slave_0 removed [ 210.014193][ T6563] macvlan2: entered promiscuous mode [ 210.014220][ T6563] bridge0: entered promiscuous mode [ 210.197834][ T6261] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.198132][ T6261] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.198452][ T6261] bridge_slave_0: entered allmulticast mode [ 210.286254][ T6261] bridge_slave_0: entered promiscuous mode [ 211.307968][ T6261] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.308301][ T6261] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.308657][ T6261] bridge_slave_1: entered allmulticast mode [ 211.491286][ T6261] bridge_slave_1: entered promiscuous mode [ 211.768141][ T6261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.782803][ T6574] loop0: detected capacity change from 0 to 1024 [ 211.785829][ T6574] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 212.112876][ T6261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.342048][ T6579] loop4: detected capacity change from 0 to 256 [ 212.352174][ T69] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 212.437897][ T69] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 212.437953][ T69] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 212.437979][ T69] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 212.438000][ T69] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 212.438021][ T69] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 212.438042][ T69] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 212.438063][ T69] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 212.447100][ T69] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 212.469315][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 212.469639][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 212.471834][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 212.472309][ T13] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 212.480662][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 212.481041][ T6261] team0: Port device team_slave_0 added [ 212.488186][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 212.495295][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 212.519532][ T69] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 212.524523][ T6261] team0: Port device team_slave_1 added [ 212.534536][ T69] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 212.538483][ T1030] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 212.554143][ T6581] loop2: detected capacity change from 0 to 512 [ 212.620438][ T3072] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 212.736894][ T159] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 212.786038][ T3072] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 212.786098][ T3072] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 212.786126][ T3072] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 212.786153][ T3072] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 212.786179][ T3072] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 212.786205][ T3072] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 212.786231][ T3072] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 212.806841][ T159] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 212.810062][ T830] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 212.816519][ T69] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 212.817264][ T57] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 212.825915][ T57] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 212.829489][ T57] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 212.835933][ T57] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 212.846266][ T69] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 212.882073][ T57] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 212.975800][ T830] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 212.976670][ T830] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 213.041796][ T69] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 213.074282][ T5612] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 213.084129][ T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 213.178944][ T57] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 213.414786][ T69] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 213.502693][ T4887] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 213.502747][ T4887] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 213.502771][ T4887] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 213.502795][ T4887] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 213.502817][ T4887] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 213.502839][ T4887] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 213.502860][ T4887] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 213.502883][ T4887] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 213.593924][ T69] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 213.620407][ T57] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 213.636732][ T57] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 213.656317][ T69] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 213.687991][ T6261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.688010][ T6261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.688038][ T6261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.690478][ T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 213.697824][ T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 213.746945][ T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 213.750110][ T57] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 213.851547][ T6261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.851567][ T6261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.851600][ T6261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.038989][ T6586] loop3: detected capacity change from 0 to 1024 [ 214.071804][ T6586] EXT4-fs: quotafile must be on filesystem root [ 214.075234][ T6586] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 214.959285][ T4887] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 215.005065][ T5273] 8021q: adding VLAN 0 to HW filter on device eth3 [ 215.007927][ T5614] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 215.102370][ T6261] hsr_slave_0: entered promiscuous mode [ 215.116099][ T6261] hsr_slave_1: entered promiscuous mode [ 215.127591][ T6261] debugfs: 'hsr0' already exists in 'hsr' [ 215.127612][ T6261] Cannot create hsr debugfs directory [ 216.584353][ T6618] loop4: detected capacity change from 0 to 32768 [ 216.647857][ T1030] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 216.649449][ T1030] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 216.655255][ T1030] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 216.656028][ T1030] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 216.656789][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 216.657797][ T1030] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 216.665388][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 216.668353][ T1030] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 216.676535][ T1030] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 216.686447][ T93] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 216.693912][ T159] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 216.699005][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 216.707342][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 216.710214][ T1030] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 216.714398][ T1030] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 216.724613][ T1030] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 216.726232][ T1030] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 216.759149][ T1030] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 216.766758][ T1030] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 216.779773][ T93] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 216.787375][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 216.790124][ T159] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 216.795403][ T159] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 216.811767][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 216.816359][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 216.821854][ T159] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 217.123512][ T93] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 217.124379][ T93] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 217.126696][ T93] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 217.128562][ T93] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 217.129430][ T93] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 217.132297][ T93] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 217.133925][ T93] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 217.133964][ T93] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 217.133997][ T93] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 217.158480][ T93] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 217.232741][ T159] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 217.237728][ T159] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 217.422368][ T5621] Bluetooth: hci0: command 0x0406 tx timeout [ 217.422397][ T5628] Bluetooth: hci3: command 0x0406 tx timeout [ 217.422431][ T5628] Bluetooth: hci2: command 0x0406 tx timeout [ 217.422444][ T5621] Bluetooth: hci4: command 0x0406 tx timeout [ 217.437944][ T6614] loop2: detected capacity change from 0 to 32768 [ 217.568640][ T159] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 217.604496][ T93] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 217.666103][ T3072] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 217.688443][ T6640] loop0: detected capacity change from 0 to 512 [ 217.695966][ T830] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 217.696301][ T830] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 217.697384][ T830] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 217.699427][ T830] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 217.760003][ T1382] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 217.761851][ T159] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 217.831058][ T6640] EXT4-fs: Ignoring removed nobh option [ 217.832205][ T93] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 217.834358][ T93] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 217.834431][ T93] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 217.835558][ T93] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 217.835618][ T93] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 217.842142][ T830] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 217.843441][ T830] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 217.854042][ T4887] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 217.854121][ T4887] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 217.854167][ T4887] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 217.870826][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 217.870897][ T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 217.870938][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 217.888962][ T830] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 217.889037][ T830] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 217.901209][ T69] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 217.902639][ T69] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 217.903672][ T69] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 217.911831][ T69] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 217.912717][ T69] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 217.913746][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 217.915188][ T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 217.915912][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 217.918590][ T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 217.921370][ T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 217.922815][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 217.937458][ T93] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 217.954957][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 217.959687][ T93] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 217.963405][ T1030] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 217.963460][ T1030] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 217.976552][ T93] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 217.988710][ T93] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 217.989412][ T69] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 217.991336][ T69] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 217.996246][ T93] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 217.997065][ T93] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 217.999021][ T69] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 218.027769][ T69] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 218.027842][ T69] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 218.032898][ T69] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 218.033709][ T69] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 218.034657][ T93] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 218.054849][ T69] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 218.056342][ T69] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 218.068948][ T69] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 218.072435][ T69] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 218.072486][ T69] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 218.072518][ T69] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 218.089745][ T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 218.096409][ T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 218.203704][ T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 218.217597][ T830] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 218.225798][ T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 218.236904][ T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 218.236967][ T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 218.253570][ T57] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 218.285022][ T69] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 218.285079][ T69] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 218.296633][ T4887] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 218.296698][ T4887] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 218.311888][ T830] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 218.345031][ T4887] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 218.346533][ T69] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 218.363403][ T4887] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 218.380706][ T69] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 218.398009][ T69] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 218.432848][ T93] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 218.491708][ T6614] XFS (loop2): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 218.492832][ T6614] XFS (loop2): log mount failed [ 218.493452][ T6640] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.498677][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 218.510463][ T6640] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 218.511345][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 218.517717][ T6618] XFS (loop4): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 218.518388][ T6618] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop4": -EINTR [ 218.614867][ T6618] XFS (loop4): log mount failed [ 219.131949][ T5614] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 219.324333][ T5612] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 219.379025][ T4887] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 219.467204][ T6640] Quota error (device loop0): do_check_range: Getting block 134217728 out of range 0-5 [ 219.468105][ T6633] loop3: detected capacity change from 0 to 32768 [ 219.560619][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 219.576279][ T69] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 219.586338][ T830] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 219.592721][ T4887] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 219.595279][ T4887] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 219.597617][ T4887] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 219.603561][ T4887] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 219.651111][ T4887] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 219.651216][ T4887] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 219.656033][ T4887] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 219.680106][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 219.687571][ T830] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 219.695460][ T93] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 219.696357][ T69] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 219.697141][ T93] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 219.712508][ T69] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 219.714718][ T93] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 219.719501][ T93] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 219.720566][ T6664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.197'. [ 219.720596][ T6664] netlink: 'syz.2.197': attribute type 5 has an invalid length. [ 219.720610][ T6664] netlink: 28 bytes leftover after parsing attributes in process `syz.2.197'. [ 219.721311][ T69] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 219.729216][ T69] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 219.742964][ T57] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 219.745375][ T69] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 219.757272][ T69] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 219.770139][ T830] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 219.771075][ T830] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 219.771365][ T830] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 219.773521][ T830] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 219.773752][ T6656] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #2: block 3: comm syz.0.196: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 219.778931][ T69] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 219.781181][ T830] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 219.784425][ T69] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 219.790760][ T69] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 219.790821][ T69] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 219.791917][ T830] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 219.794189][ T830] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 219.799479][ T6633] XFS (loop3): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 219.813375][ T830] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 219.814209][ T69] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 219.814998][ T69] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 219.827118][ T69] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 219.827180][ T69] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 219.827211][ T69] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 219.827258][ T69] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 219.827346][ T69] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 219.950359][ T4887] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 219.956507][ T93] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 219.957205][ T69] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 219.989386][ T4887] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 219.998209][ T57] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 220.008548][ T830] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 220.009390][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 220.009744][ T830] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 220.010296][ T830] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 220.022383][ T93] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 220.039197][ T830] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 220.040231][ T830] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 220.041375][ T830] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 220.045293][ T93] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 220.046608][ T69] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 220.046923][ T69] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 220.053036][ T69] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 220.057385][ T69] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 220.066296][ T69] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 220.074354][ T69] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 220.075421][ T69] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 220.075596][ T69] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 220.075745][ T69] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 220.075891][ T69] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 220.076037][ T69] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 220.076203][ T69] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 220.076566][ T69] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 220.076757][ T69] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 220.076903][ T69] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 220.077049][ T69] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 220.077194][ T69] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 220.082782][ T830] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 220.083162][ T830] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 220.086669][ T830] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 220.086877][ T830] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 220.123867][ T830] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 220.132858][ T830] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 220.394008][ T93] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 220.397940][ T93] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 220.419287][ T4887] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 220.567299][ T4887] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 220.567949][ T6633] XFS (loop3): Ending clean mount [ 220.568947][ T93] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 220.600886][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 220.644240][ T6664] geneve2: entered promiscuous mode [ 220.644268][ T6664] geneve2: entered allmulticast mode [ 220.722197][ T93] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 220.728462][ T13] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 220.728516][ T13] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 220.728553][ T13] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 220.847311][ T5613] XFS (loop3): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 220.996827][ T4887] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 220.998464][ T57] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 220.998749][ T57] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 220.998892][ T57] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 220.999508][ T57] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 221.151060][ T5615] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.253740][ T4887] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 221.318077][ T57] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 221.348886][ T830] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 221.378941][ T5615] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 221.511655][ T4887] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 221.645355][ T6261] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 221.728358][ T5613] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 221.816008][ T6261] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 221.921946][ T6674] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 221.933877][ T6261] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 221.959139][ T6674] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 222.293164][ T6261] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 222.508346][ T6261] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 222.668997][ T6261] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 222.690254][ T6261] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 223.118334][ T6261] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 223.150067][ T6674] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 223.150155][ T6674] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 223.221383][ T6694] netlink: 16 bytes leftover after parsing attributes in process `syz.3.199'. [ 223.942048][ T6707] netlink: 36 bytes leftover after parsing attributes in process `syz.4.204'. [ 223.942069][ T6707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.204'. [ 223.968569][ T60] Bluetooth: hci0: command 0x0406 tx timeout [ 225.106193][ T6674] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 225.107218][ T6674] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 225.270832][ T5620] Bluetooth: hci3: command 0x0406 tx timeout [ 225.620606][ T6674] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 225.620724][ T6674] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 225.930409][ T37] audit: type=1800 audit(1778453027.141:8): pid=6692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.199" name="file0" dev="overlay" ino=258 res=0 errno=0 [ 225.969161][ T6674] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 225.969418][ T6674] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 226.029268][ T60] Bluetooth: hci0: command 0x0406 tx timeout [ 226.298735][ T6674] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 226.303898][ T6261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.466077][ T6261] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.524342][ T4887] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.524531][ T4887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.587304][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.587536][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.690638][ T6711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.206'. [ 226.690677][ T6711] netlink: 20 bytes leftover after parsing attributes in process `syz.2.206'. [ 226.768953][ T6711] geneve3: entered promiscuous mode [ 226.768971][ T6711] geneve3: entered allmulticast mode [ 227.012561][ T5857] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 227.029625][ T1681] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 227.159665][ T5857] usb 3-1: Using ep0 maxpacket: 8 [ 227.163143][ T5857] usb 3-1: unable to get BOS descriptor or descriptor too short [ 227.164713][ T5857] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.164769][ T5857] usb 3-1: config 1 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 227.164800][ T5857] usb 3-1: config 1 interface 0 has no altsetting 0 [ 227.177243][ T5857] usb 3-1: New USB device found, idVendor=05ac, idProduct=0243, bcdDevice= 0.40 [ 227.177281][ T5857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.177304][ T5857] usb 3-1: Product: syz [ 227.177405][ T5857] usb 3-1: Manufacturer: syz [ 227.177449][ T5857] usb 3-1: SerialNumber: syz [ 227.298499][ T1681] usb 5-1: unable to get BOS descriptor or descriptor too short [ 227.309334][ T60] Bluetooth: hci3: command 0x0406 tx timeout [ 227.309374][ T60] Bluetooth: hci4: command 0x0406 tx timeout [ 227.332524][ T1681] usb 5-1: config 39 has an invalid interface number: 126 but max is 0 [ 227.332556][ T1681] usb 5-1: config 39 has no interface number 0 [ 227.332667][ T1681] usb 5-1: config 39 interface 126 has no altsetting 0 [ 227.333981][ T1681] usb 5-1: language id specifier not provided by device, defaulting to English [ 227.378003][ T1681] usb 5-1: New USB device found, idVendor=06cd, idProduct=011a, bcdDevice=49.93 [ 227.378278][ T1681] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.378303][ T1681] usb 5-1: Product: syz [ 227.378319][ T1681] usb 5-1: SerialNumber: syz [ 227.630319][ T60] Bluetooth: hci2: command 0x0406 tx timeout [ 227.787087][ T6714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.798631][ T6714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.904961][ T5857] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input7 [ 227.907977][ T1681] keyspan 5-1:39.126: Keyspan - (without firmware) converter detected [ 227.974326][ T1681] usb 5-1: USB disconnect, device number 7 [ 227.984831][ T1681] keyspan 5-1:39.126: device disconnected [ 228.035619][ T60] Bluetooth: hci1: command 0x0c1a tx timeout [ 228.115839][ T4963] bcm5974 3-1:1.0: could not read from device [ 228.284315][ T5857] usb 3-1: USB disconnect, device number 5 [ 228.524411][ T6723] loop3: detected capacity change from 0 to 2048 [ 228.543936][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 228.544253][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 228.557481][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 228.570418][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 228.573736][ T3072] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 228.573988][ T3072] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 228.574200][ T3072] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 228.574404][ T3072] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 228.576535][ T3072] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 228.578193][ T3072] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 228.584534][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 228.585777][ T57] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 228.601285][ T57] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 228.617205][ T57] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 228.624400][ T6723] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 228.630841][ T57] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 228.668371][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 228.805555][ T3072] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 228.820549][ T4887] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 228.835747][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 228.865999][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 228.868768][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 228.868817][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 228.868844][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 228.868870][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 228.868896][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 228.868923][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 228.876450][ T57] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 228.878248][ T57] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 228.878295][ T57] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 228.878319][ T57] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 228.878343][ T57] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 228.878366][ T57] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 228.890094][ T4887] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 228.890146][ T4887] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 228.890171][ T4887] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 228.890195][ T4887] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 228.890218][ T4887] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 228.890241][ T4887] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 228.890290][ T4887] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 228.897876][ T57] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 228.905978][ T57] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 228.954462][ T93] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 228.974245][ T69] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 229.025557][ T69] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 229.140491][ T69] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 229.140575][ T69] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 229.140603][ T69] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 229.183134][ T32] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 229.299654][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 229.394259][ T60] Bluetooth: hci4: command 0x0406 tx timeout [ 229.447003][ T6737] loop2: detected capacity change from 0 to 1024 [ 229.473245][ T6737] hfsplus: Unknown parameter 'tQ R—B-óê±g¿pr' [ 229.511007][ T6737] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 229.709224][ T60] Bluetooth: hci2: command 0x0406 tx timeout [ 229.863067][ T32] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 229.863104][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.863126][ T32] usb 4-1: Product: syz [ 229.863142][ T32] usb 4-1: Manufacturer: syz [ 229.863158][ T32] usb 4-1: SerialNumber: syz [ 230.127325][ T60] Bluetooth: hci1: command 0x0c1a tx timeout [ 230.165097][ T32] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 231.258776][ T5601] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 231.562409][ T5857] usb 4-1: USB disconnect, device number 5 [ 231.704245][ T5601] usb 4-1: ath9k_htc: Unable to allocate URBs [ 231.708370][ T5857] usb 4-1: ath9k_htc: USB layer deinitialized [ 231.807625][ T69] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 231.807924][ T69] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 231.808163][ T69] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 231.808384][ T69] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 231.808660][ T69] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 231.859991][ T69] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 231.912888][ T5613] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 231.915361][ T6753] netlink: 28 bytes leftover after parsing attributes in process `syz.0.212'. [ 232.190594][ T60] Bluetooth: hci1: command 0x0c1a tx timeout [ 232.334964][ T5620] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 232.384784][ T5620] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 232.388052][ T5620] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 232.393766][ T5620] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 232.394758][ T5620] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 232.678944][ T6767] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 232.678977][ T6767] overlayfs: failed to set xattr on upper [ 232.678986][ T6767] overlayfs: ...falling back to uuid=null. [ 232.776221][ T6767] overlayfs: failed to clone lowerpath [ 234.732982][ T60] Bluetooth: hci5: command tx timeout [ 235.419455][ T5601] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 235.570250][ T5601] usb 1-1: Using ep0 maxpacket: 16 [ 235.856970][ T5601] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.857009][ T5601] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.857051][ T5601] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 235.857077][ T5601] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.915256][ T5601] usb 1-1: config 0 descriptor?? [ 236.257444][ T6807] netlink: 16 bytes leftover after parsing attributes in process `syz.2.221'. [ 236.378791][ T6800] loop4: detected capacity change from 0 to 128 [ 236.448455][ T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 236.473413][ T1382] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 236.475046][ T1382] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 236.475261][ T1382] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 236.507392][ T1382] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 236.522149][ T1382] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 236.522211][ T1382] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 236.522238][ T1382] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 236.753844][ T60] Bluetooth: hci5: command tx timeout [ 236.785759][ T5790] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 237.699997][ T5601] hid-multitouch 0003:1FD2:6007.0002: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.0-1/input0 [ 237.872277][ T5601] usb 1-1: USB disconnect, device number 12 [ 238.375526][ T6818] fido_id[6818]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 238.833240][ T60] Bluetooth: hci5: command tx timeout [ 239.199729][ T6842] FAULT_INJECTION: forcing a failure. [ 239.199729][ T6842] name failslab, interval 1, probability 0, space 0, times 0 [ 239.199772][ T6842] CPU: 1 UID: 0 PID: 6842 Comm: syz.3.218 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 239.199801][ T6842] Tainted: [L]=SOFTLOCKUP [ 239.199809][ T6842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 239.199821][ T6842] Call Trace: [ 239.199837][ T6842] [ 239.199846][ T6842] dump_stack_lvl+0xe8/0x150 [ 239.199882][ T6842] should_fail_ex+0x46b/0x600 [ 239.199915][ T6842] should_failslab+0xa8/0x100 [ 239.199949][ T6842] __kmalloc_noprof+0xdf/0x7b0 [ 239.199985][ T6842] ? tomoyo_encode+0x28b/0x550 [ 239.200013][ T6842] tomoyo_encode+0x28b/0x550 [ 239.200038][ T6842] tomoyo_mount_permission+0x4c1/0x9d0 [ 239.200075][ T6842] ? tomoyo_mount_permission+0x2b3/0x9d0 [ 239.200105][ T6842] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 239.200184][ T6842] security_sb_mount+0xe4/0x320 [ 239.200207][ T6842] path_mount+0xbc/0x10e0 [ 239.200227][ T6842] ? user_path_at+0xd4/0x160 [ 239.200264][ T6842] ? user_path_at+0xd4/0x160 [ 239.200290][ T6842] __se_sys_mount+0x31d/0x420 [ 239.200317][ T6842] ? __pfx___se_sys_mount+0x10/0x10 [ 239.200346][ T6842] ? __x64_sys_mount+0x20/0xc0 [ 239.200367][ T6842] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.200395][ T6842] do_syscall_64+0x15f/0xf80 [ 239.200417][ T6842] ? trace_irq_disable+0x3b/0x140 [ 239.200445][ T6842] ? clear_bhb_loop+0x40/0x90 [ 239.200466][ T6842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.200484][ T6842] RIP: 0033:0x7ffabf99cdd9 [ 239.200502][ T6842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.200519][ T6842] RSP: 002b:00007ffabdbf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 239.200540][ T6842] RAX: ffffffffffffffda RBX: 00007ffabfc15fa0 RCX: 00007ffabf99cdd9 [ 239.200554][ T6842] RDX: 0000200000000080 RSI: 0000200000000300 RDI: 0000000000000000 [ 239.200566][ T6842] RBP: 00007ffabdbf6090 R08: 0000200000000100 R09: 0000000000000000 [ 239.200578][ T6842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 239.200589][ T6842] R13: 00007ffabfc16038 R14: 00007ffabfc15fa0 R15: 00007fffc167edb8 [ 239.200620][ T6842] [ 239.289275][ T5601] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 239.463603][ T5601] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.463661][ T5601] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 239.463684][ T5601] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.509989][ T93] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 239.510718][ T93] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 239.529644][ T1681] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 239.537936][ T5601] usb 1-1: config 0 descriptor?? [ 241.521074][ T60] Bluetooth: hci5: command tx timeout [ 241.546570][ T5601] pwc: Askey VC010 type 2 USB webcam detected. [ 241.583249][ T1681] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 241.585386][ T5857] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 241.635216][ T6826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.225'. [ 241.635243][ T6826] netlink: 12 bytes leftover after parsing attributes in process `syz.0.225'. [ 241.915134][ T5601] pwc: recv_control_msg error -32 req 02 val 2b00 [ 241.950075][ T5601] pwc: recv_control_msg error -32 req 02 val 2700 [ 241.964061][ T6853] process 'syz.4.228' launched './file0' with NULL argv: empty string added [ 241.965068][ T6853] Invalid argument reading file caps for ./file0 [ 242.067561][ T6854] loop4: detected capacity change from 0 to 256 [ 242.147786][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 242.151824][ T93] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 242.151870][ T93] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 242.151898][ T93] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 242.151924][ T93] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 242.151948][ T93] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 242.151971][ T93] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 242.151993][ T93] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 242.177117][ T1382] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 242.178330][ T1382] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 242.178371][ T1382] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 242.178394][ T1382] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 242.178418][ T1382] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 242.178454][ T1382] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 242.178498][ T1382] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 242.178521][ T1382] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 242.210180][ T3354] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 242.211671][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 242.214240][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 242.269025][ T1382] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 242.278977][ T1382] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 242.279013][ T1382] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 242.280808][ T1382] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 242.280842][ T1382] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 242.280868][ T1382] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 242.280892][ T1382] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 242.280915][ T1382] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 242.286949][ T1382] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 242.288919][ T1382] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 242.296536][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 242.300333][ T1382] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 242.317630][ T1382] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 242.317982][ T1382] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 242.318236][ T1382] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 242.318489][ T1382] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 242.320198][ T1382] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 242.337579][ T1382] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 242.337953][ T1382] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 242.363882][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 242.378426][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 242.381457][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 242.383391][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 242.396996][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 242.397819][ T6854] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x1d73664b, utbl_chksum : 0xe619d30d) [ 242.399197][ T69] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 242.873229][ T1681] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 242.981385][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.982299][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.983647][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.983695][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.111014][ T1681] usb 5-1: Using ep0 maxpacket: 8 [ 243.113694][ T1681] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.113766][ T1681] usb 5-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 243.113795][ T1681] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.239548][ T5601] pwc: recv_control_msg error -71 req 04 val 1000 [ 243.240101][ T5601] pwc: recv_control_msg error -71 req 04 val 1300 [ 243.242719][ T5601] pwc: recv_control_msg error -71 req 04 val 1400 [ 243.243267][ T5601] pwc: recv_control_msg error -71 req 02 val 2000 [ 243.245335][ T5601] pwc: recv_control_msg error -71 req 02 val 2100 [ 243.258098][ T1681] usb 5-1: config 0 descriptor?? [ 243.290830][ T5601] pwc: recv_control_msg error -71 req 04 val 1500 [ 243.300882][ T5601] pwc: recv_control_msg error -71 req 02 val 2500 [ 243.309386][ T5601] pwc: recv_control_msg error -71 req 02 val 2400 [ 243.322969][ T5601] pwc: recv_control_msg error -71 req 02 val 2600 [ 243.323530][ T5601] pwc: recv_control_msg error -71 req 02 val 2900 [ 243.327982][ T5601] pwc: recv_control_msg error -71 req 02 val 2800 [ 243.328742][ T5601] pwc: recv_control_msg error -71 req 04 val 1100 [ 243.356374][ T5601] pwc: recv_control_msg error -71 req 04 val 1200 [ 243.394999][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 243.472429][ T5601] pwc: Registered as video103. [ 243.476117][ T5601] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 243.580598][ T5601] usb 1-1: USB disconnect, device number 13 [ 243.895109][ T6865] loop0: detected capacity change from 0 to 512 [ 243.962404][ T6854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.965488][ T6865] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 243.978697][ T6854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.105107][ T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.139221][ T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.139283][ T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.139311][ T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.139337][ T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.139363][ T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.139388][ T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.139414][ T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.143924][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.143991][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.159205][ T3354] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.159261][ T3354] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.159286][ T3354] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.159310][ T3354] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.159334][ T3354] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.159358][ T3354] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.159381][ T3354] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.159405][ T3354] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.159438][ T3354] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.159462][ T3354] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.159485][ T3354] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.159509][ T3354] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.159532][ T3354] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.159557][ T3354] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.159580][ T3354] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.206602][ T3421] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.206654][ T3421] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.206679][ T3421] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.206703][ T3421] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.206726][ T3421] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.206750][ T3421] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.206773][ T3421] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.206797][ T3421] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.206820][ T3421] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.206844][ T3421] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.206868][ T3421] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.206891][ T3421] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.206914][ T3421] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.206938][ T3421] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.206961][ T3421] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.206985][ T3421] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.208146][ T3421] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.230662][ T3421] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.230714][ T3421] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.230741][ T3421] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.230768][ T3421] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.230795][ T3421] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.230820][ T3421] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.230846][ T3421] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.230872][ T3421] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.230898][ T3421] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.230924][ T3421] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.230950][ T3421] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.230976][ T3421] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.231002][ T3421] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.231027][ T3421] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.231053][ T3421] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.231078][ T3421] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.231104][ T3421] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.231131][ T3421] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.231156][ T3421] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.231182][ T3421] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.231215][ T3421] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.231242][ T3421] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.231267][ T3421] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.231293][ T3421] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.231319][ T3421] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.231346][ T3421] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.231372][ T3421] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.231398][ T3421] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.231424][ T3421] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.231450][ T3421] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.231476][ T3421] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.231501][ T3421] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.231528][ T3421] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.249930][ T57] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 244.250014][ T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.250048][ T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.250071][ T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.250094][ T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.250116][ T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.250139][ T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.250162][ T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.251776][ T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.256618][ T3421] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.258852][ T3421] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 244.260279][ T3421] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 244.334962][ T1681] usb 5-1: USB disconnect, device number 8 [ 245.281475][ T1382] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 245.305754][ T69] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 245.364820][ T5615] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 245.382963][ T5612] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 245.901124][ T6860] loop2: detected capacity change from 0 to 32768 [ 247.416001][ T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 247.426020][ T3072] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 247.454229][ T4887] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 247.479377][ T69] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 247.496916][ T3072] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 247.516316][ T69] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 247.559219][ T1030] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 247.588782][ T4887] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 247.619629][ T3421] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 247.621035][ T3421] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 247.674804][ T3373] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 247.675790][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 247.676606][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 247.677367][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 247.722054][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 247.722963][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 247.723702][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 247.725659][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 247.734762][ T3373] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 248.000691][ T69] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 248.003042][ T69] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 248.004361][ T69] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 248.005096][ T69] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 248.005793][ T69] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 248.006474][ T69] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 248.007124][ T69] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 248.007769][ T69] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 248.075032][ T1233] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 248.077341][ T1233] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 248.096351][ T1233] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 248.096431][ T1233] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 248.098208][ T1233] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 248.098249][ T1233] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 248.098279][ T1233] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 248.123648][ T69] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 248.182455][ T69] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 248.184459][ T6860] read_mapping_page failed! [ 248.184508][ T6860] jfs_mount: diMount(ipaimap) failed w/rc = -5 [ 248.184566][ T69] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 248.243380][ T6860] Mount JFS Failure: -5 [ 248.243400][ T6860] jfs_mount failed w/return code = -5 [ 248.289307][ T5803] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 248.419284][ T5803] usb 5-1: device descriptor read/64, error -71 [ 248.560811][ T5614] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 248.661881][ T5803] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 249.906361][ T6909] loop2: detected capacity change from 0 to 256 [ 250.127421][ T1382] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 250.243415][ T1382] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 250.282071][ T1382] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 250.298269][ T1382] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 250.311807][ T1382] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 250.323415][ T1382] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 250.336236][ T1382] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 250.349415][ T1382] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 250.398410][ T1382] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 250.454504][ T1382] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 250.466592][ T1382] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 250.487343][ T1382] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 250.672366][ T1382] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 250.710941][ T1382] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 250.729134][ T57] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 250.742846][ T1382] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 250.753543][ T1382] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 250.757170][ T3421] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 250.757852][ T69] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 250.758550][ T69] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 250.775274][ T57] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 250.783332][ T3421] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 250.788471][ T1382] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 250.791889][ T69] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 251.102162][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 251.119523][ T830] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 251.121227][ T69] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 251.121343][ T6909] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe0a6470d, utbl_chksum : 0xe619d30d) [ 251.125362][ T69] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 251.165587][ T1382] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 251.165639][ T1382] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 251.165666][ T1382] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 251.165692][ T1382] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 251.179689][ T69] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 251.274385][ T4887] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 251.275109][ T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 251.275669][ T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 251.280582][ T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 251.280637][ T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 251.280665][ T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 251.280690][ T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 251.280714][ T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 251.280738][ T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 251.280762][ T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 251.285620][ T4887] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 251.309340][ T4887] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 251.317254][ T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 251.553728][ T69] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 251.555160][ T69] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 251.557284][ T69] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 251.558558][ T69] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 251.757957][ T5790] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 252.583862][ T6778] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.584216][ T6778] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.584650][ T6778] bridge_slave_0: entered allmulticast mode [ 252.640678][ T6778] bridge_slave_0: entered promiscuous mode [ 252.663467][ T6778] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.663657][ T6778] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.663881][ T6778] bridge_slave_1: entered allmulticast mode [ 252.667851][ T6778] bridge_slave_1: entered promiscuous mode [ 253.514560][ T6778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.052706][ T6934] binder: 6919:6934 ioctl c0306201 0 returned -14 [ 254.312559][ T6938] binder: BINDER_SET_CONTEXT_MGR already set [ 254.421744][ T6938] binder: 6919:6938 ioctl 4018620d 200000000040 returned -16 [ 254.446291][ T6778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.458854][ T57] tipc: Subscription rejected, illegal request [ 255.543760][ T6957] syz.4.252 uses obsolete (PF_INET,SOCK_PACKET) [ 255.739383][ T5745] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 255.775699][ T159] bridge_slave_1: left allmulticast mode [ 255.775741][ T159] bridge_slave_1: left promiscuous mode [ 255.776102][ T159] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.895220][ T5745] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 255.895257][ T5745] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 255.895303][ T5745] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 255.895329][ T5745] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.947029][ T159] bridge_slave_0: left allmulticast mode [ 255.947071][ T159] bridge_slave_0: left promiscuous mode [ 255.947395][ T159] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.203866][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.203989][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.213744][ T5745] usb 1-1: usb_control_msg returned -32 [ 256.213795][ T5745] usbtmc 1-1:16.0: can't read capabilities [ 256.555500][ T6965] netlink: 'syz.2.255': attribute type 4 has an invalid length. [ 256.649893][ T6966] netlink: 'syz.2.255': attribute type 4 has an invalid length. [ 257.083363][ T5803] usb 1-1: USB disconnect, device number 14 [ 257.730233][ T159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.829901][ T159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.897874][ T159] bond0 (unregistering): Released all slaves [ 258.015200][ T6778] team0: Port device team_slave_0 added [ 258.313495][ T6984] netlink: 'syz.0.262': attribute type 5 has an invalid length. [ 258.313519][ T6984] netlink: 24 bytes leftover after parsing attributes in process `syz.0.262'. [ 258.421306][ T6778] team0: Port device team_slave_1 added [ 259.044226][ T7002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.266'. [ 259.511688][ T159] hsr_slave_0: left promiscuous mode [ 259.572423][ T159] hsr_slave_1: left promiscuous mode [ 259.574666][ T159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.667926][ T159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.243630][ T7023] netlink: 'syz.2.270': attribute type 1 has an invalid length. [ 261.377391][ C0] vcan0: j1939_tp_rxtimer: 0xffff888061143800: rx timeout, send abort [ 261.878478][ C0] vcan0: j1939_tp_rxtimer: 0xffff888061143800: abort rx timeout. Force session deactivation [ 263.468041][ T7001] syz.4.266 (7001) used greatest stack depth: 17760 bytes left [ 263.554358][ T159] team0 (unregistering): Port device team_slave_1 removed [ 263.631294][ T159] team0 (unregistering): Port device team_slave_0 removed [ 263.923441][ T6778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.923456][ T6778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.923474][ T6778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.155667][ T7023] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 264.378323][ T6778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.378338][ T6778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.378358][ T6778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.808049][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 265.050246][ T10] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 265.050281][ T10] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 265.050313][ T10] usb 4-1: Product: syz [ 265.050328][ T10] usb 4-1: Manufacturer: syz [ 265.050343][ T10] usb 4-1: SerialNumber: syz [ 265.058364][ T10] usb 4-1: config 0 descriptor?? [ 265.171239][ T10] ch341 4-1:0.0: ch341-uart converter detected [ 266.446255][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 266.484779][ T7040] netlink: 4 bytes leftover after parsing attributes in process `syz.3.275'. [ 266.549873][ T10] usb 4-1: ch341-uart converter now attached to ttyUSB0 [ 266.782461][ T6778] hsr_slave_0: entered promiscuous mode [ 266.786544][ T6778] hsr_slave_1: entered promiscuous mode [ 266.805902][ T6778] debugfs: 'hsr0' already exists in 'hsr' [ 266.805933][ T6778] Cannot create hsr debugfs directory [ 266.846797][ T5723] usb 4-1: USB disconnect, device number 6 [ 267.055329][ T37] audit: type=1326 audit(1778453068.361:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.0.280" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a787cdd9 code=0x7ffc0000 [ 267.100227][ T37] audit: type=1326 audit(1778453068.471:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.0.280" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fa3a787cdd9 code=0x7ffc0000 [ 267.100711][ T37] audit: type=1326 audit(1778453068.471:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.0.280" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a787cdd9 code=0x7ffc0000 [ 267.102125][ T37] audit: type=1326 audit(1778453068.471:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.0.280" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a787cdd9 code=0x7ffc0000 [ 267.157429][ T5723] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 267.329880][ T5723] ch341 4-1:0.0: device disconnected [ 268.180818][ T7069] syzkaller0: entered promiscuous mode [ 268.180849][ T7069] syzkaller0: entered allmulticast mode [ 268.817660][ T7085] syzkaller0: entered promiscuous mode [ 268.817690][ T7085] syzkaller0: entered allmulticast mode [ 268.849354][ T5273] 8021q: adding VLAN 0 to HW filter on device eth5 [ 272.828602][ T7135] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 274.008846][ T5723] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 274.179334][ T5723] usb 1-1: Using ep0 maxpacket: 32 [ 274.183657][ T5723] usb 1-1: config 9 has an invalid interface number: 240 but max is 1 [ 274.183689][ T5723] usb 1-1: config 9 has an invalid interface number: 104 but max is 1 [ 274.183712][ T5723] usb 1-1: config 9 has an invalid interface number: 244 but max is 1 [ 274.183735][ T5723] usb 1-1: config 9 has 3 interfaces, different from the descriptor's value: 2 [ 274.183765][ T5723] usb 1-1: config 9 has no interface number 0 [ 274.183783][ T5723] usb 1-1: config 9 has no interface number 1 [ 274.183800][ T5723] usb 1-1: config 9 has no interface number 2 [ 274.183878][ T5723] usb 1-1: config 9 interface 240 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 274.183907][ T5723] usb 1-1: config 9 interface 240 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 274.183935][ T5723] usb 1-1: config 9 interface 240 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 274.183963][ T5723] usb 1-1: config 9 interface 240 altsetting 0 endpoint 0x2 has invalid maxpacket 5248, setting to 64 [ 274.184001][ T5723] usb 1-1: config 9 interface 240 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 274.184024][ T5723] usb 1-1: config 9 interface 240 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 274.184066][ T5723] usb 1-1: config 9 interface 104 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 274.184088][ T5723] usb 1-1: config 9 interface 104 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 274.184112][ T5723] usb 1-1: config 9 interface 104 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 24 [ 274.184139][ T5723] usb 1-1: config 9 interface 104 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 274.184160][ T5723] usb 1-1: config 9 interface 104 altsetting 2 has a duplicate endpoint with address 0x1, skipping [ 274.184185][ T5723] usb 1-1: config 9 interface 104 altsetting 2 has a duplicate endpoint with address 0xF, skipping [ 274.184209][ T5723] usb 1-1: config 9 interface 104 altsetting 2 has 7 endpoint descriptors, different from the interface descriptor's value: 12 [ 274.184239][ T5723] usb 1-1: too many endpoints for config 9 interface 244 altsetting 47: 106, using maximum allowed: 30 [ 274.184281][ T5723] usb 1-1: config 9 interface 244 altsetting 47 has a duplicate endpoint with address 0x9, skipping [ 274.184305][ T5723] usb 1-1: config 9 interface 244 altsetting 47 has an invalid descriptor for endpoint zero, skipping [ 274.184327][ T5723] usb 1-1: config 9 interface 244 altsetting 47 has an invalid descriptor for endpoint zero, skipping [ 274.184352][ T5723] usb 1-1: config 9 interface 244 altsetting 47 has a duplicate endpoint with address 0x8D, skipping [ 274.184376][ T5723] usb 1-1: config 9 interface 244 altsetting 47 has 5 endpoint descriptors, different from the interface descriptor's value: 106 [ 274.184405][ T5723] usb 1-1: config 9 interface 104 has no altsetting 0 [ 274.184424][ T5723] usb 1-1: config 9 interface 244 has no altsetting 0 [ 274.310937][ T5723] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice=98.5b [ 274.310968][ T5723] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.310988][ T5723] usb 1-1: Product: syz [ 274.311002][ T5723] usb 1-1: Manufacturer: â Š [ 274.311015][ T5723] usb 1-1: SerialNumber: syz [ 274.989950][ T5273] 8021q: adding VLAN 0 to HW filter on device eth6 [ 276.746139][ T7167] netlink: 16 bytes leftover after parsing attributes in process `syz.3.302'. [ 277.640764][ T5723] usb 1-1: USB disconnect, device number 15 [ 277.773258][ T7167] bond0: option lp_interval: invalid value (18446744073709551612) [ 277.773289][ T7167] bond0: option lp_interval: allowed values 1 - 2147483647 [ 278.836442][ T37] audit: type=1326 audit(1778453080.201:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7179 comm="syz.0.305" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa3a787cdd9 code=0x0 [ 284.257336][ T6778] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 284.425360][ T6778] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 284.475265][ T6778] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 284.680911][ T6778] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 284.687383][ T6778] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 284.960525][ T6778] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 285.027163][ T6778] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 285.062552][ T7251] binder: BINDER_SET_CONTEXT_MGR already set [ 285.062591][ T7251] binder: 7249:7251 ioctl 4018620d 2000000002c0 returned -16 [ 285.307660][ T6778] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 286.313930][ T7275] tmpfs: Bad value for 'mpol' [ 288.108915][ T6778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.246702][ T6778] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.334433][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.334627][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.595706][ T159] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.627702][ T159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.369214][ T1681] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 292.721987][ T1681] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 292.722026][ T1681] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 292.722064][ T1681] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 292.722111][ T1681] usb 3-1: New USB device found, idVendor=046d, idProduct=c081, bcdDevice= 0.00 [ 292.722136][ T1681] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.765364][ T1681] usb 3-1: config 0 descriptor?? [ 292.766434][ T7320] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 293.191780][ T5620] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 293.277290][ T1681] logitech-hidpp-device 0003:046D:C081.0003: unknown main item tag 0x0 [ 293.277332][ T1681] logitech-hidpp-device 0003:046D:C081.0003: unknown main item tag 0x0 [ 293.277362][ T1681] logitech-hidpp-device 0003:046D:C081.0003: unknown main item tag 0x0 [ 293.277391][ T1681] logitech-hidpp-device 0003:046D:C081.0003: unknown main item tag 0x0 [ 293.277419][ T1681] logitech-hidpp-device 0003:046D:C081.0003: unknown main item tag 0x0 [ 293.277448][ T1681] logitech-hidpp-device 0003:046D:C081.0003: unknown main item tag 0x0 [ 293.277475][ T1681] logitech-hidpp-device 0003:046D:C081.0003: unknown main item tag 0x0 [ 293.277504][ T1681] logitech-hidpp-device 0003:046D:C081.0003: unknown main item tag 0x0 [ 293.277532][ T1681] logitech-hidpp-device 0003:046D:C081.0003: unknown main item tag 0x0 [ 293.277560][ T1681] logitech-hidpp-device 0003:046D:C081.0003: unknown main item tag 0x0 [ 293.413200][ T5620] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 293.438166][ T5620] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 293.463917][ T5620] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 293.464882][ T5620] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 293.736593][ T1681] logitech-hidpp-device 0003:046D:C081.0003: hidraw0: USB HID v0.08 Device [HID 046d:c081] on usb-dummy_hcd.2-1/input0 [ 293.774160][ T1681] usb 3-1: USB disconnect, device number 6 [ 293.984912][ T7333] fido_id[7333]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 294.536276][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 294.689232][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 294.692179][ T10] usb 5-1: config 0 has an invalid interface number: 83 but max is 0 [ 294.692209][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.692229][ T10] usb 5-1: config 0 has no interface number 0 [ 294.692277][ T10] usb 5-1: config 0 interface 83 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 294.692303][ T10] usb 5-1: config 0 interface 83 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 294.692328][ T10] usb 5-1: config 0 interface 83 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 295.799855][ T5620] Bluetooth: hci1: command tx timeout [ 295.853415][ T10] usb 5-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 295.853450][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.853472][ T10] usb 5-1: Product: syz [ 295.853488][ T10] usb 5-1: Manufacturer: syz [ 295.853505][ T10] usb 5-1: SerialNumber: syz [ 296.958780][ T10] usb 5-1: config 0 descriptor?? [ 296.993487][ T10] redrat3 5-1:0.83: Couldn't find all endpoints [ 297.432652][ T5857] usb 5-1: USB disconnect, device number 11 [ 297.789691][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 297.870590][ T60] Bluetooth: hci1: command tx timeout [ 299.951127][ T60] Bluetooth: hci1: command tx timeout [ 302.115209][ T60] Bluetooth: hci1: command tx timeout [ 302.313431][ T7393] genirq: Flags mismatch irq 4. 00202000 (pcl812) vs. 00202080 (ttyS0) [ 303.046591][ T5857] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 303.344125][ T5857] usb 5-1: config 0 has no interfaces? [ 303.345622][ T5857] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 303.345652][ T5857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 303.345672][ T5857] usb 5-1: SerialNumber: syz [ 303.424749][ T5857] usb 5-1: config 0 descriptor?? [ 304.719851][ T5745] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 304.899374][ T5745] usb 3-1: Using ep0 maxpacket: 8 [ 304.902289][ T5745] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 304.902319][ T5745] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 304.902372][ T5745] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 304.902401][ T5745] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 304.902446][ T5745] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 304.902468][ T5745] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.033612][ T5745] hub 3-1:1.0: bad descriptor, ignoring hub [ 305.033654][ T5745] hub 3-1:1.0: probe with driver hub failed with error -5 [ 305.036112][ T5745] cdc_wdm 3-1:1.0: skipping garbage [ 305.036133][ T5745] cdc_wdm 3-1:1.0: skipping garbage [ 305.299291][ T5745] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 305.299315][ T5745] cdc_wdm 3-1:1.0: Unknown control protocol [ 306.660910][ T5745] usb 3-1: USB disconnect, device number 7 [ 308.539343][ T60] Bluetooth: hci4: Invalid handle: 0x2e6d > 0x0eff [ 308.798740][ T7439] netlink: 14 bytes leftover after parsing attributes in process `syz.2.357'. [ 308.837851][ T9] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 309.033118][ T9] usb 1-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc [ 309.033154][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.307129][ T9] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6280 [ 309.386053][ T10] usb 5-1: USB disconnect, device number 12 [ 309.620790][ T9] gspca_sn9c20x: Write register 1001 failed -71 [ 309.620813][ T9] gspca_sn9c20x: Device initialization failed [ 309.620911][ T9] gspca_sn9c20x 1-1:252.0: probe with driver gspca_sn9c20x failed with error -71 [ 309.792389][ T9] usb 1-1: USB disconnect, device number 16 [ 310.191913][ T7454] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 310.191964][ T7454] UDF-fs: Scanning with blocksize 512 failed [ 310.194168][ T7454] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 310.194215][ T7454] UDF-fs: Scanning with blocksize 1024 failed [ 310.195439][ T7454] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 310.195475][ T7454] UDF-fs: Scanning with blocksize 2048 failed [ 310.196475][ T7454] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 310.196512][ T7454] UDF-fs: Scanning with blocksize 4096 failed [ 311.750656][ T4887] bridge_slave_1: left allmulticast mode [ 311.750696][ T4887] bridge_slave_1: left promiscuous mode [ 311.751048][ T4887] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.942131][ T4887] bridge_slave_0: left allmulticast mode [ 311.942173][ T4887] bridge_slave_0: left promiscuous mode [ 311.942491][ T4887] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.815664][ T32] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 312.869307][ T7484] netlink: 48 bytes leftover after parsing attributes in process `syz.3.375'. [ 314.012894][ T32] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.012925][ T32] usb 3-1: config 0 has no interfaces? [ 314.012959][ T32] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 314.012983][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.091809][ T32] usb 3-1: config 0 descriptor?? [ 314.269773][ T4887] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.314536][ T7493] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 314.333579][ T4887] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.355371][ T4887] bond0 (unregistering): Released all slaves [ 314.397697][ T9] usb 3-1: USB disconnect, device number 8 [ 314.627369][ T7493] netlink: 52 bytes leftover after parsing attributes in process `syz.0.376'. [ 314.997155][ T60] Bluetooth: hci2: unexpected subevent 0x1a length: 10 > 6 [ 315.127264][ T7326] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.127764][ T7326] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.128173][ T7326] bridge_slave_0: entered allmulticast mode [ 315.208901][ T7326] bridge_slave_0: entered promiscuous mode [ 315.649183][ T4887] hsr_slave_0: left promiscuous mode [ 315.689340][ T4887] hsr_slave_1: left promiscuous mode [ 315.690253][ T4887] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.752706][ T4887] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.322879][ T5620] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 317.322935][ T5620] Bluetooth: hci2: command 0x0406 tx timeout [ 317.638384][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.638464][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.879218][ T5723] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 318.029223][ T5723] usb 1-1: Using ep0 maxpacket: 32 [ 318.031846][ T5723] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 318.031871][ T5723] usb 1-1: config 0 has no interface number 0 [ 318.041003][ T5723] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 318.041033][ T5723] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.041053][ T5723] usb 1-1: Product: syz [ 318.041067][ T5723] usb 1-1: Manufacturer: syz [ 318.041082][ T5723] usb 1-1: SerialNumber: syz [ 318.279325][ T5723] usb 1-1: config 0 descriptor?? [ 318.309227][ T5601] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 318.415957][ T5723] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 318.415983][ T5723] usb 1-1: selecting invalid altsetting 1 [ 318.415994][ T5723] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 318.469340][ T10] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 318.483945][ T5601] usb 4-1: Using ep0 maxpacket: 32 [ 318.494659][ T5601] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 318.494694][ T5601] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.615120][ T5723] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 318.615641][ T5723] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 318.615864][ T5723] usb 1-1: media controller created [ 318.709360][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 318.709400][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 318.709430][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 318.709477][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c081, bcdDevice= 0.00 [ 318.709503][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.743712][ T5601] usb 4-1: config 0 descriptor?? [ 318.876396][ T10] usb 5-1: config 0 descriptor?? [ 318.905361][ T7540] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 318.907046][ T5723] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 319.049821][ T5601] gspca_main: sq930x-2.14.0 probing 041e:403c [ 319.282066][ T5601] gspca_sq930x: ucbus_write failed -71 [ 319.282193][ T5601] sq930x 4-1:0.0: probe with driver sq930x failed with error -71 [ 319.333798][ T5601] usb 4-1: USB disconnect, device number 7 [ 319.371297][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 319.371437][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 319.443786][ T10] usb 5-1: USB disconnect, device number 13 [ 320.246502][ T5723] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 320.246570][ T5723] zl10353_read_register: readreg error (reg=127, ret==-71) [ 320.250076][ T5723] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 321.829373][ T7551] netlink: 'syz.3.390': attribute type 10 has an invalid length. [ 322.095950][ T5723] usb 1-1: USB disconnect, device number 17 [ 322.602834][ T4887] team0 (unregistering): Port device team_slave_1 removed [ 322.682254][ T4887] team0 (unregistering): Port device team_slave_0 removed [ 323.252230][ T7326] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.259343][ T7326] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.259699][ T7326] bridge_slave_1: entered allmulticast mode [ 323.271830][ T7326] bridge_slave_1: entered promiscuous mode [ 323.280578][ T5273] 8021q: adding VLAN 0 to HW filter on device eth5 [ 323.282236][ T7551] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.412124][ T7551] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.612352][ T7551] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.612561][ T7551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.626401][ T7551] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.626626][ T7551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.707713][ T7551] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 323.913984][ T7326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.955560][ T7326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.823265][ T7572] netlink: 64 bytes leftover after parsing attributes in process `syz.0.397'. [ 325.352258][ T5815] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 325.570722][ T5815] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 325.570761][ T5815] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 325.570790][ T5815] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 325.570835][ T5815] usb 5-1: New USB device found, idVendor=046d, idProduct=c081, bcdDevice= 0.00 [ 325.570861][ T5815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.789455][ T5815] usb 5-1: config 0 descriptor?? [ 325.790477][ T7573] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 325.958533][ T7326] team0: Port device team_slave_0 added [ 326.796858][ T7326] team0: Port device team_slave_1 added [ 326.863555][ T5815] usbhid 5-1:0.0: can't add hid device: -71 [ 326.863694][ T5815] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 326.969308][ T5815] usb 5-1: USB disconnect, device number 14 [ 327.046256][ T60] Bluetooth: hci2: Invalid handle: 0x2e6d > 0x0eff [ 327.359219][ T7326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.359233][ T7326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.359250][ T7326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.363498][ T7326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.363510][ T7326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.363527][ T7326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.399686][ T10] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 327.578397][ T10] usb 4-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc [ 327.578434][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.953486][ T10] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6280 [ 328.348825][ T10] gspca_sn9c20x: Write register 1000 failed -71 [ 328.348849][ T10] gspca_sn9c20x: Device initialization failed [ 328.348937][ T10] gspca_sn9c20x 4-1:252.0: probe with driver gspca_sn9c20x failed with error -71 [ 328.443638][ T10] usb 4-1: USB disconnect, device number 8 [ 328.533299][ T7326] hsr_slave_0: entered promiscuous mode [ 328.554270][ T7326] hsr_slave_1: entered promiscuous mode [ 328.570838][ T7326] debugfs: 'hsr0' already exists in 'hsr' [ 328.570866][ T7326] Cannot create hsr debugfs directory [ 330.116269][ T7633] netlink: 'syz.3.413': attribute type 2 has an invalid length. [ 331.426649][ T5273] 8021q: adding VLAN 0 to HW filter on device eth6 [ 331.875091][ C1] [ 331.875103][ C1] ====================================================== [ 331.875113][ C1] WARNING: possible circular locking dependency detected [ 331.875126][ C1] syzkaller #0 Tainted: G L [ 331.875148][ C1] ------------------------------------------------------ [ 331.875157][ C1] syz.3.413/7638 is trying to acquire lock: [ 331.875169][ C1] ffff88802b373720 (slock-AF_PHONET/1){+.+.}-{3:3}, at: __sk_receive_skb+0x1bf/0x9e0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 331.875240][ C1] [ 331.875240][ C1] but task is already holding lock: [ 331.875254][ C1] ffff88802b3748a0 (slock-AF_PHONET){+...}-{3:3}, at: __sk_receive_skb+0x1f1/0x9e0 [ 331.875310][ C1] [ 331.875310][ C1] which lock already depends on the new lock. [ 331.875310][ C1] [ 331.875318][ C1] [ 331.875318][ C1] the existing dependency chain (in reverse order) is: [ 331.875327][ C1] [ 331.875327][ C1] -> #1 (slock-AF_PHONET){+...}-{3:3}: [ 331.875356][ C1] rt_spin_lock+0x83/0x400 [ 331.875388][ C1] __sk_receive_skb+0x1f1/0x9e0 [ 331.875417][ C1] phonet_rcv+0x781/0xc40 [ 331.875436][ C1] process_backlog+0x5e1/0xc60 [ 331.875465][ C1] __napi_poll+0xab/0x550 [ 331.875491][ C1] net_rx_action+0x696/0xe00 [ 331.875520][ C1] handle_softirqs+0x1de/0x6d0 [ 331.875550][ C1] __local_bh_enable_ip+0x170/0x2b0 [ 331.875578][ C1] netif_rx+0xb9/0xf0 [ 331.875598][ C1] pn_send+0x62a/0x8e0 [ 331.875614][ C1] pn_skb_send+0x218/0x530 [ 331.875631][ C1] pipe_snd_status+0x1f1/0x320 [ 331.875650][ C1] pipe_do_rcv+0xf15/0x16a0 [ 331.875671][ C1] __sk_receive_skb+0x962/0x9e0 [ 331.875698][ C1] pep_do_rcv+0x685/0xaa0 [ 331.875715][ C1] __release_sock+0x2a9/0x3d0 [ 331.875735][ C1] release_sock+0x1be/0x290 [ 331.875763][ C1] pep_sock_accept+0xd47/0x11e0 [ 331.875805][ C1] pn_socket_accept+0xc1/0x310 [ 331.875833][ C1] do_accept+0x6ca/0x930 [ 331.875862][ C1] __sys_accept4+0x139/0x230 [ 331.875890][ C1] __x64_sys_accept4+0x9a/0xb0 [ 331.875919][ C1] do_syscall_64+0x15f/0xf80 [ 331.875942][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.875963][ C1] [ 331.875963][ C1] -> #0 (slock-AF_PHONET/1){+.+.}-{3:3}: [ 331.875996][ C1] __lock_acquire+0x15a5/0x2d10 [ 331.876016][ C1] lock_acquire+0x106/0x350 [ 331.876035][ C1] rt_spin_lock_nested+0x81/0x3f0 [ 331.876066][ C1] __sk_receive_skb+0x1bf/0x9e0 [ 331.876094][ C1] pep_do_rcv+0x685/0xaa0 [ 331.876114][ C1] __sk_receive_skb+0x962/0x9e0 [ 331.876150][ C1] phonet_rcv+0x781/0xc40 [ 331.876167][ C1] process_backlog+0x5e1/0xc60 [ 331.876196][ C1] __napi_poll+0xab/0x550 [ 331.876221][ C1] net_rx_action+0x696/0xe00 [ 331.876249][ C1] handle_softirqs+0x1de/0x6d0 [ 331.876277][ C1] __local_bh_enable_ip+0x170/0x2b0 [ 331.876303][ C1] netif_rx+0xb9/0xf0 [ 331.876324][ C1] pn_send+0x62a/0x8e0 [ 331.876340][ C1] pn_skb_send+0x218/0x530 [ 331.876358][ C1] pep_sock_close+0x2c1/0x5b0 [ 331.876377][ C1] pn_socket_release+0x9b/0xc0 [ 331.876405][ C1] __sock_release+0xb9/0x250 [ 331.876430][ C1] sock_close+0x1c/0x30 [ 331.876454][ C1] __fput+0x461/0xa70 [ 331.876478][ C1] task_work_run+0x1d9/0x270 [ 331.876500][ C1] get_signal+0x11eb/0x1330 [ 331.876528][ C1] arch_do_signal_or_restart+0xbc/0x840 [ 331.876549][ C1] exit_to_user_mode_loop+0x8c/0x4d0 [ 331.876570][ C1] do_syscall_64+0x33e/0xf80 [ 331.876592][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.876611][ C1] [ 331.876611][ C1] other info that might help us debug this: [ 331.876611][ C1] [ 331.876619][ C1] Possible unsafe locking scenario: [ 331.876619][ C1] [ 331.876624][ C1] CPU0 CPU1 [ 331.876630][ C1] ---- ---- [ 331.876635][ C1] lock(slock-AF_PHONET); [ 331.876649][ C1] lock(slock-AF_PHONET/1); [ 331.876667][ C1] lock(slock-AF_PHONET); [ 331.876680][ C1] lock(slock-AF_PHONET/1); [ 331.876698][ C1] [ 331.876698][ C1] *** DEADLOCK *** [ 331.876698][ C1] [ 331.876704][ C1] 7 locks held by syz.3.413/7638: [ 331.876715][ C1] #0: ffff888060e553b8 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x89/0x250 [ 331.876778][ C1] #1: ffff88802b374098 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: pep_sock_close+0x86/0x5b0 [ 331.876828][ C1] #2: ffffffff8dfc8240 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 331.876886][ C1] #3: ffffffff8dfc8240 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x271/0xc60 [ 331.876944][ C1] #4: ffff88802b3748a0 (slock-AF_PHONET){+...}-{3:3}, at: __sk_receive_skb+0x1f1/0x9e0 [ 331.877005][ C1] #5: ffffffff8dfc8240 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 331.877065][ C1] #6: ffff88802b374958 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: phonet_rcv+0x781/0xc40 [ 331.877114][ C1] [ 331.877114][ C1] stack backtrace: [ 331.877138][ C1] CPU: 1 UID: 0 PID: 7638 Comm: syz.3.413 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 331.877169][ C1] Tainted: [L]=SOFTLOCKUP [ 331.877177][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 331.877191][ C1] Call Trace: [ 331.877199][ C1] [ 331.877208][ C1] dump_stack_lvl+0xe8/0x150 [ 331.877237][ C1] print_circular_bug+0x2e1/0x300 [ 331.877266][ C1] check_noncircular+0x12e/0x150 [ 331.877295][ C1] __lock_acquire+0x15a5/0x2d10 [ 331.877319][ C1] ? try_to_take_rt_mutex+0x840/0xb00 [ 331.877348][ C1] ? __sk_receive_skb+0x1bf/0x9e0 [ 331.877379][ C1] lock_acquire+0x106/0x350 [ 331.877400][ C1] ? __sk_receive_skb+0x1bf/0x9e0 [ 331.877431][ C1] ? sk_filter_trim_cap+0x8f1/0xce0 [ 331.877461][ C1] rt_spin_lock_nested+0x81/0x3f0 [ 331.877492][ C1] ? __sk_receive_skb+0x1bf/0x9e0 [ 331.877524][ C1] ? __pfx_sk_filter_trim_cap+0x10/0x10 [ 331.877549][ C1] ? __lock_acquire+0x6b5/0x2d10 [ 331.877571][ C1] ? __pfx_rt_spin_lock_nested+0x10/0x10 [ 331.877604][ C1] ? rt_spin_lock+0x1e0/0x400 [ 331.877637][ C1] __sk_receive_skb+0x1bf/0x9e0 [ 331.877671][ C1] pep_do_rcv+0x685/0xaa0 [ 331.877696][ C1] ? __pfx_pep_do_rcv+0x10/0x10 [ 331.877722][ C1] ? __pfx_pep_do_rcv+0x10/0x10 [ 331.877745][ C1] ? phonet_rcv+0x781/0xc40 [ 331.877763][ C1] __sk_receive_skb+0x962/0x9e0 [ 331.877798][ C1] phonet_rcv+0x781/0xc40 [ 331.877817][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 331.877847][ C1] ? __pfx_phonet_rcv+0x10/0x10 [ 331.877870][ C1] ? process_backlog+0x271/0xc60 [ 331.877898][ C1] ? process_backlog+0x271/0xc60 [ 331.877928][ C1] ? __pfx_phonet_rcv+0x10/0x10 [ 331.877948][ C1] process_backlog+0x5e1/0xc60 [ 331.877987][ C1] __napi_poll+0xab/0x550 [ 331.878017][ C1] net_rx_action+0x696/0xe00 [ 331.878055][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 331.878086][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 331.878114][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 331.878151][ C1] ? enqueue_to_backlog+0x340/0xcb0 [ 331.878184][ C1] handle_softirqs+0x1de/0x6d0 [ 331.878218][ C1] __local_bh_enable_ip+0x170/0x2b0 [ 331.878250][ C1] netif_rx+0xb9/0xf0 [ 331.878274][ C1] pn_send+0x62a/0x8e0 [ 331.878297][ C1] pn_skb_send+0x218/0x530 [ 331.878319][ C1] pep_sock_close+0x2c1/0x5b0 [ 331.878344][ C1] pn_socket_release+0x9b/0xc0 [ 331.878374][ C1] __sock_release+0xb9/0x250 [ 331.878402][ C1] ? __pfx_sock_close+0x10/0x10 [ 331.878428][ C1] sock_close+0x1c/0x30 [ 331.878454][ C1] __fput+0x461/0xa70 [ 331.878484][ C1] task_work_run+0x1d9/0x270 [ 331.878511][ C1] ? __pfx_task_work_run+0x10/0x10 [ 331.878537][ C1] ? __pfx_core_sys_select+0x10/0x10 [ 331.878562][ C1] get_signal+0x11eb/0x1330 [ 331.878590][ C1] ? poll_select_finish+0x26b/0x630 [ 331.878618][ C1] arch_do_signal_or_restart+0xbc/0x840 [ 331.878641][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 331.878665][ C1] exit_to_user_mode_loop+0x8c/0x4d0 [ 331.878683][ C1] ? rcu_is_watching+0x15/0xb0 [ 331.878707][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.878729][ C1] do_syscall_64+0x33e/0xf80 [ 331.878751][ C1] ? clear_bhb_loop+0x40/0x90 [ 331.878773][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.878792][ C1] RIP: 0033:0x7ffabf99cdd9 [ 331.878811][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.878830][ C1] RSP: 002b:00007ffabdbd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 331.878852][ C1] RAX: 0000000000000007 RBX: 00007ffabfc16090 RCX: 00007ffabf99cdd9 [ 331.878867][ C1] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 331.878881][ C1] RBP: 00007ffabfa32d69 R08: 0000000000000000 R09: 0000000000000000 [ 331.878894][ C1] R10: 0000200000002080 R11: 0000000000000246 R12: 0000000000000000 [ 331.878907][ C1] R13: 00007ffabfc16128 R14: 00007ffabfc16090 R15: 00007fffc167edb8 [ 331.878929][ C1] [ 331.939118][ T5601] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 332.092445][ T5601] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 332.092477][ T5601] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.092497][ T5601] usb 3-1: Product: syz [ 332.092511][ T5601] usb 3-1: Manufacturer: syz [ 332.092526][ T5601] usb 3-1: SerialNumber: syz [ 332.107056][ T5601] usb 3-1: config 0 descriptor?? [ 332.120788][ T5601] hub 3-1:0.0: bad descriptor, ignoring hub [ 332.120818][ T5601] hub 3-1:0.0: probe with driver hub failed with error -5 [ 332.482983][ T5601] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 332.522278][ T5601] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 332.530735][ T5601] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 332.530779][ T5601] usb 3-1: media controller created [ 332.584788][ T5601] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 332.921497][ T5601] DVB: Unable to find symbol dib7000p_attach() [ 332.921513][ T5601] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 333.053119][ T5601] rc_core: IR keymap rc-dib0700-rc5 not found [ 333.053140][ T5601] Registered IR keymap rc-empty [ 333.053319][ T5601] dvb-usb: could not initialize remote control. [ 333.053329][ T5601] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 333.262774][ T69] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.775141][ T5601] usb 3-1: USB disconnect, device number 9 [ 333.816458][ T5601] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 334.101331][ T69] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.143237][ T5273] 8021q: adding VLAN 0 to HW filter on device eth7 [ 334.583117][ T69] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.860391][ T69] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.880659][ T5273] 8021q: adding VLAN 0 to HW filter on device eth8 [ 335.199390][ T69] bridge_slave_1: left allmulticast mode [ 335.199411][ T69] bridge_slave_1: left promiscuous mode [ 335.199542][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.279804][ T69] bridge_slave_0: left allmulticast mode [ 335.279826][ T69] bridge_slave_0: left promiscuous mode [ 335.280001][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.749618][ T69] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 335.869778][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.949653][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.970446][ T69] bond0 (unregistering): Released all slaves [ 336.013377][ T5273] 8021q: adding VLAN 0 to HW filter on device eth9 [ 336.632277][ T5273] 8021q: adding VLAN 0 to HW filter on device eth10 [ 336.991069][ T5273] 8021q: adding VLAN 0 to HW filter on device eth11 [ 337.209199][ T69] hsr_slave_0: left promiscuous mode [ 337.249243][ T69] hsr_slave_1: left promiscuous mode [ 337.250017][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.250038][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.289667][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.289691][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.369458][ T69] veth1_macvtap: left promiscuous mode [ 337.369499][ T69] veth0_macvtap: left promiscuous mode [ 337.369589][ T69] veth1_vlan: left promiscuous mode [ 337.369650][ T69] veth0_vlan: left promiscuous mode [ 337.869530][ T69] team0 (unregistering): Port device team_slave_1 removed [ 337.910043][ T69] team0 (unregistering): Port device team_slave_0 removed [ 338.012034][ T5273] 8021q: adding VLAN 0 to HW filter on device eth12 [ 339.121765][ T69] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.121816][ T69] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.340270][ T69] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.340297][ T69] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.551048][ T69] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.551089][ T69] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.780647][ T69] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.780675][ T69] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.109291][ T69] bridge_slave_1: left allmulticast mode [ 340.109322][ T69] bridge_slave_1: left promiscuous mode [ 340.109515][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.189614][ T69] bridge_slave_0: left allmulticast mode [ 340.189635][ T69] bridge_slave_0: left promiscuous mode [ 340.189768][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.369723][ T69] bridge_slave_1: left allmulticast mode [ 340.369757][ T69] bridge_slave_1: left promiscuous mode [ 340.369936][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.449701][ T69] bridge_slave_0: left allmulticast mode [ 340.449724][ T69] bridge_slave_0: left promiscuous mode [ 340.449859][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.809603][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.889632][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 340.950145][ T69] bond0 (unregistering): Released all slaves [ 341.249613][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 341.309731][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.350335][ T69] bond0 (unregistering): Released all slaves [ 341.372775][ T5273] 8021q: adding VLAN 0 to HW filter on device eth13 [ 341.710440][ T5273] 8021q: adding VLAN 0 to HW filter on device eth14